tkvideo has a memory issue in playing videos

中危 4.3CVE-2022-24902 · GHSA-jmhj-vh4q-hhmq · PYSEC-2022-187 · Published 06/05/2022 · updated 17/06/2026

要点

CVE-2022-24902 是影响 tkvideoplayer, tkvideoplayer (python) 的中危 (CVSS 4.3)漏洞。
未来 30 天内被利用的概率（EPSS）：0.54%，高于 45.4% 的漏洞。
修复：升级到 2.0.0 或更高版本。

Package	Affected versions	Patched versions
tkvideoplayer PyPI	`< 2.0.0`	`2.0.0`
tkvideoplayer python	`< 2.0.0`	`2.0.0`

Description

Huge memory consumption even when playing small files. This issue has been patched in 2.0.0. Please upgrade to version 2.0.0 or above.

NVD description

TkVideoplayer is a simple library to play video files in tkinter. Uncontrolled memory consumption in versions of TKVideoplayer prior to 2.0.0 can theoretically lead to performance degradation. There are no known workarounds. This issue has been patched and users are advised to upgrade to version 2.0.0 or later.

References

PaulleDemon/tkVideoPlayer security advisory · WEB
nvd.nist.gov/vuln/detail/CVE-2022-24902 · ADVISORY
PaulleDemon/tkVideoPlayer · WEB
PaulleDemon/tkVideoPlayer · PACKAGE
pypa/advisory-database · WEB

Running one of these products? Scan your site to see whether it exposes a vulnerable version.

Scan my site free