Bento4 Denial of Service Vulnerability (CNVD-2023-00385)

Bento4 is an open source C library for reading and writing MP4 files.A denial of service vulnerability exists in versions prior to Bento4 1.6.0-635, which stems from a segmentation error in the write memory access of the product AP4_NullTerminatedStringAtom::AP4_NllTerminated StringAtom component. error. An attacker could exploit this vulnerability to cause a denial of service impact.