{"id":"CVE-2022-24902","aliases":["EUVD-2022-0339","GHSA-jmhj-vh4q-hhmq","PYSEC-2022-187"],"status":"published","title":"Memory issue in playing videos","description":"TkVideoplayer is a simple library to play video files in tkinter. Uncontrolled memory consumption in versions of TKVideoplayer prior to 2.0.0 can theoretically lead to performance degradation. There are no known workarounds. This issue has been patched and users are advised to upgrade to version 2.0.0 or later.","severity":{"version":"3.1","score":2.9,"vector":"CVSS:3.1/AV:L/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:L","level":"low","assessor":"cna","from":"cve"},"epss":{"day":"2026-11-10","score":0.00539,"percentile":0.457,"model":"v2026.06.15"},"facts":{"in_kev":false,"known_exploited":false,"public_exploit":false,"fix_available":true},"cwes":["CWE-400"],"published":"2022-05-03T03:47:34Z","modified":"2026-06-17T04:32:46Z","fixes":[{"ecosystem":"PyPI","package":"tkvideoplayer","fixed_in":["2.0.0"],"sources":["ghsa","osv"]}],"affected":[{"source":"ghsa","ecosystem":"PyPI","package":"tkvideoplayer","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.0.0"}]}]},{"source":"osv","ecosystem":"PyPI","package":"tkvideoplayer","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.0.0"}]}],"versions":["0.0.1","1.0.0","1.1.0","1.3.0"]},{"source":"osv","ecosystem":"PyPI","package":"tkvideoplayer","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.0.0"}]}],"versions":["0.0.1","1.0.0","1.1.0","1.3.0"]}],"products":[{"vendor":"paulledemon","product":"tkvideoplayer"},{"vendor":"python","product":"tkvideoplayer"}],"references":[{"url":"https://github.com/PaulleDemon/tkVideoPlayer/security/advisories/GHSA-jmhj-vh4q-hhmq","tags":["x_refsource_CONFIRM","x_transferred","Third Party Advisory","web","advisory"]},{"url":"https://github.com/PaulleDemon/tkVideoPlayer/issues/3","tags":["x_refsource_MISC","x_transferred","Issue Tracking","Third Party Advisory","web","report"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2022-24902","tags":["advisory"]},{"url":"https://github.com/pypa/advisory-database/tree/main/vulns/tkvideoplayer/PYSEC-2022-187.yaml","tags":["web"]},{"url":"https://github.com/advisories/GHSA-jmhj-vh4q-hhmq"},{"url":"https://github.com/PaulleDemon/tkVideoPlayer/issues","tags":["package"]}],"sources":{"cve":[{"id":"CVE-2022-24902","title":"Memory issue in playing videos","description":"TkVideoplayer is a simple library to play video files in tkinter. Uncontrolled memory consumption in versions of TKVideoplayer prior to 2.0.0 can theoretically lead to performance degradation. There are no known workarounds. This issue has been patched and users are advised to upgrade to version 2.0.0 or later.","status":"published","published":"2022-05-05T23:35:10Z","modified":"2025-04-23T18:30:13.33Z","cvss":[{"version":"3.1","score":2.9,"vector":"CVSS:3.1/AV:L/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:L","level":"low","assessor":"cna"}],"cwes":["CWE-400"],"updated_at":"2026-11-02T14:34:34.250357Z"}],"euvd":[{"id":"EUVD-2022-0339","description":"TkVideoplayer is a simple library to play video files in tkinter. Uncontrolled memory consumption in versions of TKVideoplayer prior to 2.0.0 can theoretically lead to performance degradation. There are no known workarounds. This issue has been patched and users are advised to upgrade to version 2.0.0 or later.","status":"published","published":"2022-05-05T23:35:10Z","modified":"2025-04-23T18:30:13Z","cvss":[{"version":"3.1","score":2.9,"vector":"CVSS:3.1/AV:L/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:L","level":"low"}],"updated_at":"2026-11-02T20:52:08.401317Z"}],"ghsa":[{"id":"GHSA-jmhj-vh4q-hhmq","title":"tkvideo has a memory issue in playing videos","description":"Huge memory consumption even when playing small files. This issue has been patched in 2.0.0. Please upgrade to version 2.0.0 or above.","status":"published","published":"2022-05-03T03:47:34Z","modified":"2023-02-01T05:01:31Z","cvss":[{"version":"3.1","score":4.3,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:L","level":"medium"}],"cwes":["CWE-400"],"updated_at":"2026-11-02T14:36:30.61364Z"}],"nvd":[{"id":"CVE-2022-24902","description":"TkVideoplayer is a simple library to play video files in tkinter. Uncontrolled memory consumption in versions of TKVideoplayer prior to 2.0.0 can theoretically lead to performance degradation. There are no known workarounds. This issue has been patched and users are advised to upgrade to version 2.0.0 or later.","status":"published","published":"2022-05-06T00:15:07.817Z","modified":"2026-06-17T04:32:46.03Z","cvss":[{"version":"3.1","score":2.9,"vector":"CVSS:3.1/AV:L/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:L","level":"low","assessor":"secondary"},{"version":"3.1","score":4.3,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:L","level":"medium","assessor":"primary"},{"version":"2.0","score":4.3,"vector":"AV:N/AC:M/Au:N/C:N/I:N/A:P","level":"medium","assessor":"primary"}],"cwes":["CWE-400"],"updated_at":"2026-11-02T14:07:19.51203Z"}],"osv":[{"id":"GHSA-jmhj-vh4q-hhmq","title":"tkvideo has a memory issue in playing videos","description":"Huge memory consumption even when playing small files. This issue has been patched in 2.0.0. Please upgrade to version 2.0.0 or above.","status":"published","published":"2022-05-03T03:47:34Z","modified":"2023-11-08T04:08:39.966541Z","cvss":[{"version":"3.1","score":4.3,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:L","level":"medium"}],"cwes":["CWE-400"],"updated_at":"2026-11-02T15:46:50.687609Z"},{"id":"PYSEC-2022-187","description":"TkVideoplayer is a simple library to play video files in tkinter. Uncontrolled memory consumption in versions of TKVideoplayer prior to 2.0.0 can theoretically lead to performance degradation. There are no known workarounds. This issue has been patched and users are advised to upgrade to version 2.0.0 or later.","status":"published","published":"2022-05-06T00:15:00Z","modified":"2023-11-08T04:08:39.966541Z","updated_at":"2026-11-02T15:52:53.449407Z"}]}}