PT-2021-20881

Name of the Vulnerable Software and Affected Versions: Bento4 versions prior to v1.6.0-637 Description: A NULL pointer dereference issue exists in the AP4 StszAtom::WriteFields function, located in Ap4StszAtom.cpp, allowing an attacker to cause a denial of service. Recommendations: For Bento4...

Bento4 code issue vulnerabilities

Bento4 is a C++ class library and tool for reading and writing ISO-MP4 files. A null pointer dereference vulnerability exists in the AP4StszAtom::GetSampleSize function in Ap4StszAtom.cpp in Bento4 v1.6.0-637 and earlier. An attacker could exploit this vulnerability to cause a denial of service...

PT-2021-10982

Name of the Vulnerable Software and Affected Versions: Bento4 versions prior to v1.6.0-638 Description: An issue exists in the function AP4 StszAtom::GetSampleSize located in Ap4StszAtom.cpp, allowing an attacker to cause Denial of Service due to a NULL pointer dereference. Recommendations: For...

PT-2018-12221

Name of the Vulnerable Software and Affected Versions Bento4 version 1.5.1-624 Description A issue has been found in the software, specifically a SEGV in AP4 StszAtom::GetSampleSize in Core/Ap4StszAtom.cpp. Recommendations For version 1.5.1-624, at the moment, there is no information about a newe...

PT-2017-13330

Name of the Vulnerable Software and Affected Versions Bento4 version 1.5.0-616 Description The issue is related to a Read Memory Access Violation vulnerability in the AP4 StszAtom class, located in the Ap4StszAtom.cpp file. This vulnerability can be exploited by opening a specially crafted .MP4...