PT-2026-98148

Bento4 1.6.0.0 contains an integer underflow vulnerability in AP4 AvccAtom::Create and AP4 HvccAtom::Create. A specially crafted MP4 file containing an avcC or hvcC atom with a declared size smaller than the atom header size can cause the payload-size calculation to wrap to a large unsigned value...

UBUNTU-CVE-2022-3669

A vulnerability was found in Axiomatic Bento4 and classified as problematic. This issue affects the function AP4AvccAtom::Create of the component mp4edit. The manipulation leads to memory leak. The attack may be initiated remotely. The exploit has been disclosed to the public and may be used. The...

PT-2022-23557

Name of the Vulnerable Software and Affected Versions Axiomatic Bento4 affected versions not specified Description A memory leak issue was found in the function AP4 AvccAtom::Create of the mp4edit component. This issue can be exploited remotely, leading to potential security risks. Recommendation...

Bento4 Buffer Out-of-Bounds Read Vulnerability (CNVD-2019-07056)

Bento4 is an open source C++ library for reading and writing MP4 files. A heap buffer out-of-bounds read vulnerability exists in the 'AP4AvccAtom::Create' function of the Core/Ap4AvccAtom.cpp file in Bento4 version 1.5.1-627, which can be exploited by an attacker to cause a denial of service...

PT-2018-15360

Name of the Vulnerable Software and Affected Versions Bento4 version 1.5.1-627 Description A heap-based buffer over-read issue was discovered in the AP4 AvccAtom::Create function in Core/Ap4AvccAtom.cpp. This issue is demonstrated by the mp42hls tool. Recommendations For Bento4 version 1.5.1-627,...

PT-2018-12594

Name of the Vulnerable Software and Affected Versions Bento4 version 1.5.1-624 Description A heap-based buffer over-read issue has been found in the AP4 AvccAtom::Create function, located in Core/Ap4AvccAtom.cpp. Recommendations For Bento4 version 1.5.1-624, consider restricting access to the AP4...