PT-2026-98148

Bento4 1.6.0.0 contains an integer underflow vulnerability in AP4 AvccAtom::Create and AP4 HvccAtom::Create. A specially crafted MP4 file containing an avcC or hvcC atom with a declared size smaller than the atom header size can cause the payload-size calculation to wrap to a large unsigned value...

PT-2018-15409

Name of the Vulnerable Software and Affected Versions Bento4 version 1.5.1-627 Description An issue was discovered in the AP4 DataBuffer class when called from AP4 HvccAtom::Create in Core/Ap4HvccAtom.cpp, where there is an attempt at excessive memory allocation. Recommendations For Bento4 versio...