tkvideo has a memory issue in playing videos

MOYENNE 4.3CVE-2022-24902 · GHSA-jmhj-vh4q-hhmq · PYSEC-2022-187 · Published 06/05/2022 · updated 17/06/2026

En bref

CVE-2022-24902 est une vulnérabilité MOYENNE (CVSS 4.3) touchant tkvideoplayer, tkvideoplayer (python).
Probabilité d'exploitation dans les 30 prochains jours (EPSS) : 0.54%, plus élevée que 45.4% des vulnérabilités.
Correctif : mettre à jour vers 2.0.0 ou plus récent.

Package	Affected versions	Patched versions
tkvideoplayer PyPI	`< 2.0.0`	`2.0.0`
tkvideoplayer python	`< 2.0.0`	`2.0.0`

Description

Huge memory consumption even when playing small files. This issue has been patched in 2.0.0. Please upgrade to version 2.0.0 or above.

NVD description

TkVideoplayer is a simple library to play video files in tkinter. Uncontrolled memory consumption in versions of TKVideoplayer prior to 2.0.0 can theoretically lead to performance degradation. There are no known workarounds. This issue has been patched and users are advised to upgrade to version 2.0.0 or later.

References

PaulleDemon/tkVideoPlayer security advisory · WEB
nvd.nist.gov/vuln/detail/CVE-2022-24902 · ADVISORY
PaulleDemon/tkVideoPlayer · WEB
PaulleDemon/tkVideoPlayer · PACKAGE
pypa/advisory-database · WEB

Running one of these products? Scan your site to see whether it exposes a vulnerable version.

Scan my site free