Lucene search

K
cnvdChina National Vulnerability DatabaseCNVD-2022-87940
HistoryOct 11, 2022 - 12:00 a.m.

Bento4 AP4_Atom::TypeFromString buffer overflow vulnerability

2022-10-1100:00:00
China National Vulnerability Database
www.cnvd.org.cn
8
bento4
buffer overflow
mp4 files
heap overflow
attacker exploit
confidentiality
integrity
availability
system vulnerability

0.002 Low

EPSS

Percentile

56.8%

Bento4 is an open source C library for reading and writing MP4 files. bento4 v1.6.0-639 is vulnerable to a buffer error, which stems from a heap overflow in the AP4_Atom::TypeFromString function of the mp4tag component, which could be exploited by an attacker to affect the confidentiality, integrity or availability of the system.

0.002 Low

EPSS

Percentile

56.8%

Related for CNVD-2022-87940