PT-2026-98148

Bento4 1.6.0.0 contains an integer underflow vulnerability in AP4 AvccAtom::Create and AP4 HvccAtom::Create. A specially crafted MP4 file containing an avcC or hvcC atom with a declared size smaller than the atom header size can cause the payload-size calculation to wrap to a large unsigned value...

PT-2022-23557

Name of the Vulnerable Software and Affected Versions Axiomatic Bento4 affected versions not specified Description A memory leak issue was found in the function AP4 AvccAtom::Create of the mp4edit component. This issue can be exploited remotely, leading to potential security risks. Recommendation...

PT-2019-13957

Name of the Vulnerable Software and Affected Versions Bento4 version 1.5.1.0 Description A heap-based buffer over-read issue was discovered in the AP4 AvccAtom class at Core/Ap4AvccAtom.cpp. Recommendations For Bento4 version 1.5.1.0, at the moment, there is no information about a newer version...

PT-2018-15360

Name of the Vulnerable Software and Affected Versions Bento4 version 1.5.1-627 Description A heap-based buffer over-read issue was discovered in the AP4 AvccAtom::Create function in Core/Ap4AvccAtom.cpp. This issue is demonstrated by the mp42hls tool. Recommendations For Bento4 version 1.5.1-627,...

PT-2018-12594

Name of the Vulnerable Software and Affected Versions Bento4 version 1.5.1-624 Description A heap-based buffer over-read issue has been found in the AP4 AvccAtom::Create function, located in Core/Ap4AvccAtom.cpp. Recommendations For Bento4 version 1.5.1-624, consider restricting access to the AP4...

PT-2017-12564

Name of the Vulnerable Software and Affected Versions Bento4 mp4dump versions prior to 1.5.0-616 Description The issue allows remote attackers to cause a denial of service, resulting in a NULL pointer dereference and application crash, via a crafted mp4 file. This is due to a problem in the AP4...