PT-2021-10877

Name of the Vulnerable Software and Affected Versions Bento4 version 06c39d9 Description An issue was discovered in the AP4 Stz2Atom::GetSampleSize component located in /Core/Ap4Stz2Atom.cpp, which allows an attacker to cause a denial of service DOS due to a NULL pointer dereference...

Bento4 code issue vulnerabilities

Bento4 is an open source C library for reading and writing MP4 files.A denial of service vulnerability exists in versions prior to Bento4 1.6.0-635. The vulnerability stems from a null pointer dereference in the AP4Stz2Atom::GetSampleSize component of /Core/Ap4Stz2Atom.cpp. An attacker could...

PT-2018-12595

Name of the Vulnerable Software and Affected Versions Bento4 version 1.5.1-624 Description A heap-based buffer over-read issue has been found in the AP4 BytesToUInt16BE function, located in Core/Ap4Utils.h, which is called by the AP4 Stz2Atom class. Recommendations For Bento4 version 1.5.1-624,...