UBUNTU-CVE-2022-3664

A vulnerability classified as critical has been found in Axiomatic Bento4. Affected is the function AP4BitStream::WriteBytes of the file Ap4BitStream.cpp of the component avcinfo. The manipulation leads to heap-based buffer overflow. It is possible to launch the attack remotely. The exploit has...

UBUNTU-CVE-2022-3668

A vulnerability has been found in Axiomatic Bento4 and classified as problematic. This vulnerability affects the function AP4AtomFactory::CreateAtomFromStream of the component mp4edit. The manipulation leads to memory leak. The attack can be initiated remotely. The exploit has been disclosed to t...

CVE-2022-3663 Axiomatic Bento4 MP4fragment Ap4StsdAtom.cpp AP4_StsdAtom null pointer dereference

A vulnerability was found in Axiomatic Bento4. It has been rated as problematic. This issue affects the function AP4StsdAtom of the file Ap4StsdAtom.cpp of the component MP4fragment. The manipulation leads to null pointer dereference. The attack may be initiated remotely. The exploit has been...

CVE-2022-3664 Axiomatic Bento4 avcinfo Ap4BitStream.cpp WriteBytes heap-based overflow

A vulnerability classified as critical has been found in Axiomatic Bento4. Affected is the function AP4BitStream::WriteBytes of the file Ap4BitStream.cpp of the component avcinfo. The manipulation leads to heap-based buffer overflow. It is possible to launch the attack remotely. The exploit has...

CVE-2022-3669 Axiomatic Bento4 mp4edit Create memory leak

A vulnerability was found in Axiomatic Bento4 and classified as problematic. This issue affects the function AP4AvccAtom::Create of the component mp4edit. The manipulation leads to memory leak. The attack may be initiated remotely. The exploit has been disclosed to the public and may be used. The...

CVE-2022-3667 Axiomatic Bento4 mp42aac Ap4ByteStream.cpp WritePartial heap-based overflow

A vulnerability, which was classified as critical, was found in Axiomatic Bento4. This affects the function AP4MemoryByteStream::WritePartial of the file Ap4ByteStream.cpp of the component mp42aac. The manipulation leads to heap-based buffer overflow. It is possible to initiate the attack remotel...

Bento4 资源管理错误漏洞

Bento4 is an open source C++ library for reading and writing MP4 files. Axiomatic Bento4 suffers from a resource management error vulnerability that stems from the presence of a memory reuse after release issue...

CVE-2022-3667

CVE-2022-3667 affects Axiomatic Bento4, specifically the mp42aac component and its AP4_MemoryByteStream::WritePartial implementation in Ap4ByteStream.cpp. The vulnerability is a heap-based buffer overflow that can be triggered remotely. Multiple connected sources corroborate the same details (rem...

CVE-2022-3666 Axiomatic Bento4 mp42ts Ap4LinearReader.cpp Advance use after free

A vulnerability, which was classified as critical, has been found in Axiomatic Bento4. Affected by this issue is the function AP4LinearReader::Advance of the file Ap4LinearReader.cpp of the component mp42ts. The manipulation leads to use after free. The attack may be launched remotely. The exploi...

CVE-2022-3666 Axiomatic Bento4 mp42ts Ap4LinearReader.cpp Advance use after free

A vulnerability, which was classified as critical, has been found in Axiomatic Bento4. Affected by this issue is the function AP4LinearReader::Advance of the file Ap4LinearReader.cpp of the component mp42ts. The manipulation leads to use after free. The attack may be launched remotely. The exploi...

PT-2022-23531 · Axiomatic · Axiomatic Bento4

Name of the Vulnerable Software and Affected Versions: Axiomatic Bento4 affected versions not specified Description: A critical issue has been found in Axiomatic Bento4, affecting the AP4 LinearReader::Advance function of the Ap4LinearReader.cpp file in the mp42ts component. This issue leads to u...

PT-2022-23524 · Axiomatic · Bento4

Name of the Vulnerable Software and Affected Versions: Axiomatic Bento4 affected versions not specified Description: A critical issue has been discovered, affecting the AP4 BitStream::WriteBytes function in the Ap4BitStream.cpp file of the avcinfo component. This issue leads to a heap-based buffe...

CVE-2022-3669

CVE-2022-3669 affects Axiomatic Bento4 in the AP4_AvccAtom::Create function of the mp4edit component, causing a memory leak. The issue is publicly disclosed and may be exploitable remotely; attack vector and exploit details are documented in the sources. No vendor-published fix or remediation is ...

CVE-2022-3670 Axiomatic Bento4 mp42hevc WriteSample heap-based overflow

A vulnerability was found in Axiomatic Bento4. It has been classified as critical. Affected is the function WriteSample of the component mp42hevc. The manipulation leads to heap-based buffer overflow. It is possible to launch the attack remotely. The exploit has been disclosed to the public and m...

CVE-2022-3668

Vulnerability CVE-2022-3668 affects Axiomatic Bento4 (mp4edit) via AP4_AtomFactory::CreateAtomFromStream, causing a memory leak. The issue can be triggered remotely; public PoC exists (e.g., Bug_1_POC.zip) and multiple issuances reference VDB-212008. No remediation/version details are provided in...

CVE-2022-3667 Axiomatic Bento4 mp42aac Ap4ByteStream.cpp WritePartial heap-based overflow

A vulnerability, which was classified as critical, was found in Axiomatic Bento4. This affects the function AP4MemoryByteStream::WritePartial of the file Ap4ByteStream.cpp of the component mp42aac. The manipulation leads to heap-based buffer overflow. It is possible to initiate the attack remotel...

CVE-2022-3666 Axiomatic Bento4 mp42ts Ap4LinearReader.cpp Advance use after free

A vulnerability, which was classified as critical, has been found in Axiomatic Bento4. Affected by this issue is the function AP4LinearReader::Advance of the file Ap4LinearReader.cpp of the component mp42ts. The manipulation leads to use after free. The attack may be launched remotely. The exploi...

CVE-2022-3662

CVE-2022-3662 affects Axiomatic Bento4, specifically the GetOffset function in Ap4Sample.h (mp42hls). The vulnerability is a use-after-free issue that can be triggered remotely and has been publicly disclosed (VDB-212002). Several sources (NVD, Red Hat, Ubuntu, OSV, Ubuntu OSV, Cisco/Nessus conte...

CVE-2022-3664

CVE-2022-3664 affects Axiomatic Bento4: the AVCLIB component avcinfo contains a heap-based buffer overflow in AP4_BitStream::WriteBytes (Ap4BitStream.cpp). The vulnerability can be triggered remotely and was publicly disclosed, enabling potential exploitation. The issue is described consistently ...

CVE-2022-3662 Axiomatic Bento4 mp42hls Ap4Sample.h GetOffset use after free

A vulnerability was found in Axiomatic Bento4. It has been declared as critical. This vulnerability affects the function GetOffset of the file Ap4Sample.h of the component mp42hls. The manipulation leads to use after free. The attack can be initiated remotely. The exploit has been disclosed to th...