PT-2026-98148

Bento4 1.6.0.0 contains an integer underflow vulnerability in AP4 AvccAtom::Create and AP4 HvccAtom::Create. A specially crafted MP4 file containing an avcC or hvcC atom with a declared size smaller than the atom header size can cause the payload-size calculation to wrap to a large unsigned value...

UBUNTU-CVE-2022-27607

Bento4 1.6.0-639 has a heap-based buffer over-read in the AP4HvccAtom class, a different issue than CVE-2018-14531...

PT-2022-18511

Name of the Vulnerable Software and Affected Versions Bento4 version 1.6.0-639 Description A heap-based buffer over-read issue exists in the AP4 HvccAtom class. Recommendations For Bento4 version 1.6.0-639, at the moment, there is no information about a newer version that contains a fix for this...

Bento4 Excessive Memory Allocation Vulnerability (CNVD-2019-07053)

Bento4 is a C++ class library and tool for reading and writing ISO-MP4 files. An excessive memory allocation vulnerability in the AP4DataBuffer class in Bento4 1.5.1-627 when called from AP4HvccAtom::Create in Core/Ap4HvccAtom.cpp can be exploited by an attacker to cause a denial of service...

PT-2018-15409

Name of the Vulnerable Software and Affected Versions Bento4 version 1.5.1-627 Description An issue was discovered in the AP4 DataBuffer class when called from AP4 HvccAtom::Create in Core/Ap4HvccAtom.cpp, where there is an attempt at excessive memory allocation. Recommendations For Bento4 versio...

PT-2018-12568

Name of the Vulnerable Software and Affected Versions Bento4 version 1.5.1-624 Description An issue was discovered that causes a heap-buffer-overflow crash in the AP4 HvccAtom class. This issue is located in the Core/Ap4HvccAtom.cpp file. Recommendations For Bento4 version 1.5.1-624, at the momen...