PT-2026-98148

Bento4 1.6.0.0 contains an integer underflow vulnerability in AP4 AvccAtom::Create and AP4 HvccAtom::Create. A specially crafted MP4 file containing an avcC or hvcC atom with a declared size smaller than the atom header size can cause the payload-size calculation to wrap to a large unsigned value...

PT-2018-15360

Name of the Vulnerable Software and Affected Versions Bento4 version 1.5.1-627 Description A heap-based buffer over-read issue was discovered in the AP4 AvccAtom::Create function in Core/Ap4AvccAtom.cpp. This issue is demonstrated by the mp42hls tool. Recommendations For Bento4 version 1.5.1-627,...