Linux Distros Unpatched Vulnerability : CVE-2018-14588

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - An issue has been discovered in Bento4 1.5.1-624. A NULL pointer dereference can occur in AP4DataBuffer::SetData in Core/Ap4DataBuffer.cpp. CVE-2018-14588 Note...

Bento4 security vulnerabilities

Bento4 is an open source C++ library for reading and writing MP4 files. Bento4 suffers from a denial of service vulnerability caused by a flaw in the Mp4Decrypt file Mp4Decrypt.cpp function AP4DataBuffer::SetDataSize. An attacker can exploit this vulnerability to cause a denial of service...

Bento4 security vulnerabilities

Bento4 is an open source C++ library for reading and writing MP4 files from Axiomatic Systems. A security vulnerability exists in Bento4 1.6.0-641 and earlier versions, which stems from a heap buffer overflow in the AP4DataBuffer::GetData function...

Bento4 Resource Management Error Vulnerability

Bento4 is an open source C++ library for reading and writing MP4 files. A resource management error vulnerability exists in Bento4 v1.6.0-640, which stems from an out-of-memory error in function AP4DataBuffer::ReallocateBuffer...

PT-2019-13495

Name of the Vulnerable Software and Affected Versions Bento4 version 1.5.1-627 Description The issue arises from the function AP4 DataBuffer::SetDataSize in Bento4, which fails to handle reallocation failures properly. This leads to a memory copy operation into a NULL pointer, resulting in a...

PT-2018-15409

Name of the Vulnerable Software and Affected Versions Bento4 version 1.5.1-627 Description An issue was discovered in the AP4 DataBuffer class when called from AP4 HvccAtom::Create in Core/Ap4HvccAtom.cpp, where there is an attempt at excessive memory allocation. Recommendations For Bento4 versio...

PT-2018-12598

Name of the Vulnerable Software and Affected Versions Bento4 version 1.5.1-624 Description A NULL pointer dereference issue has been found in the AP4 DataBuffer::SetData function located in Core/Ap4DataBuffer.cpp. This issue can potentially cause problems when handling data. Recommendations For...

PT-2017-13607

Name of the Vulnerable Software and Affected Versions Bento4 version 1.5.0-617 Description The issue arises from improper data size validation in the AP4 AvccAtom and AP4 HvccAtom classes, resulting in a heap-based buffer over-read and application crash in the AP4 DataBuffer::SetData function...