PT-2026-98148

Bento4 1.6.0.0 contains an integer underflow vulnerability in AP4 AvccAtom::Create and AP4 HvccAtom::Create. A specially crafted MP4 file containing an avcC or hvcC atom with a declared size smaller than the atom header size can cause the payload-size calculation to wrap to a large unsigned value...

UBUNTU-CVE-2022-3669

A vulnerability was found in Axiomatic Bento4 and classified as problematic. This issue affects the function AP4AvccAtom::Create of the component mp4edit. The manipulation leads to memory leak. The attack may be initiated remotely. The exploit has been disclosed to the public and may be used. The...

PT-2022-23557

Name of the Vulnerable Software and Affected Versions Axiomatic Bento4 affected versions not specified Description A memory leak issue was found in the function AP4 AvccAtom::Create of the mp4edit component. This issue can be exploited remotely, leading to potential security risks. Recommendation...

Bento4 Buffer Overflow Vulnerability (CNVD-2019-28469)

Bento4 is an open source C++ library for reading and writing MP4 files. A buffer overflow vulnerability exists in the AP4AvccAtom class of the Core/Ap4AvccAtom.cpp file in Bento4 version 1.5.1.0, which can be exploited by an attacker to cause a buffer overflow or heap overflow...

CVE-2019-15050

An issue was discovered in Bento4 1.5.1.0. There is a heap-based buffer over-read in the AP4AvccAtom class at Core/Ap4AvccAtom.cpp...

PT-2019-13957

Name of the Vulnerable Software and Affected Versions Bento4 version 1.5.1.0 Description A heap-based buffer over-read issue was discovered in the AP4 AvccAtom class at Core/Ap4AvccAtom.cpp. Recommendations For Bento4 version 1.5.1.0, at the moment, there is no information about a newer version...

Bento4 Buffer Out-of-Bounds Read Vulnerability (CNVD-2019-07056)

Bento4 is an open source C++ library for reading and writing MP4 files. A heap buffer out-of-bounds read vulnerability exists in the 'AP4AvccAtom::Create' function of the Core/Ap4AvccAtom.cpp file in Bento4 version 1.5.1-627, which can be exploited by an attacker to cause a denial of service...

PT-2018-15360

Name of the Vulnerable Software and Affected Versions Bento4 version 1.5.1-627 Description A heap-based buffer over-read issue was discovered in the AP4 AvccAtom::Create function in Core/Ap4AvccAtom.cpp. This issue is demonstrated by the mp42hls tool. Recommendations For Bento4 version 1.5.1-627,...

PT-2018-12594

Name of the Vulnerable Software and Affected Versions Bento4 version 1.5.1-624 Description A heap-based buffer over-read issue has been found in the AP4 AvccAtom::Create function, located in Core/Ap4AvccAtom.cpp. Recommendations For Bento4 version 1.5.1-624, consider restricting access to the AP4...

PT-2017-13607

Name of the Vulnerable Software and Affected Versions Bento4 version 1.5.0-617 Description The issue arises from improper data size validation in the AP4 AvccAtom and AP4 HvccAtom classes, resulting in a heap-based buffer over-read and application crash in the AP4 DataBuffer::SetData function...

PT-2017-12564

Name of the Vulnerable Software and Affected Versions Bento4 mp4dump versions prior to 1.5.0-616 Description The issue allows remote attackers to cause a denial of service, resulting in a NULL pointer dereference and application crash, via a crafted mp4 file. This is due to a problem in the AP4...