CVE-2019-7699

A heap-based buffer over-read occurs in AP4BitStream::WriteBytes in Codecs/Ap4BitStream.cpp in Bento4 v1.5.1-627. Remote attackers could leverage this vulnerability to cause an exception via crafted mp4 input, which leads to a denial of service...

UBUNTU-CVE-2019-7698

An issue was discovered in AP4Array::EnsureCapacity in Core/Ap4Array.h in Bento4 1.5.1-627. Crafted MP4 input triggers an attempt at excessive memory allocation, as demonstrated by mp42hls, a related issue to CVE-2018-20095...

CVE-2019-7697

The CVE-2019-7697 entry concerns Bento4 v1.5.1-627, with an assertion failure in AP4_AtomListWriter::Action (Core/Ap4Atom.cpp) that can cause a denial of service (program crash). This is documented across multiple sources (NVD, CNVD, OSV, UBuntu OSV, etc.). The connected documents confirm the vul...

CVE-2019-7698

An issue was discovered in AP4Array::EnsureCapacity in Core/Ap4Array.h in Bento4 1.5.1-627. Crafted MP4 input triggers an attempt at excessive memory allocation, as demonstrated by mp42hls, a related issue to CVE-2018-20095...

CVE-2019-7699

The CVE-2019-7699 issue affects Bento4 (v1.5.1-627). A heap-based buffer over-read occurs in AP4_BitStream::WriteBytes (Codecs/Ap4BitStream.cpp), which remote attackers can exploit by supplying crafted MP4 input to trigger an exception and cause a denial of service. Public sources consistently de...

CVE-2019-7698

The CVE-2019-7698 entry concerns Bento4 1.5.1-627, where AP4_Array::EnsureCapacity can trigger an excessive memory allocation when processing crafted MP4 input. The underlying issue is an allocation growth in Core/Ap4Array.h, leading to potential memory exhaustion. The related issue CVE-2018-2009...

CVE-2019-7697

An issue was discovered in Bento4 v1.5.1-627. There is an assertion failure in AP4AtomListWriter::Action in Core/Ap4Atom.cpp, leading to a denial of service program crash, as demonstrated by mp42hls...

CVE-2019-7699

A heap-based buffer over-read occurs in AP4BitStream::WriteBytes in Codecs/Ap4BitStream.cpp in Bento4 v1.5.1-627. Remote attackers could leverage this vulnerability to cause an exception via crafted mp4 input, which leads to a denial of service...

Bento4 Excessive Memory Allocation Attempts Vulnerability

Bento4 is a C++ class library and tool for reading and writing ISO-MP4 files. An excessive memory allocation attempt vulnerability exists in the AP4ElstAtom class in Core/Ap4ElstAtom.cpp in Bento4 1.5.1-628, which can be exploited by an attacker to cause a denial of service...

UBUNTU-CVE-2019-6966

An issue was discovered in Bento4 1.5.1-628. The AP4ElstAtom class in Core/Ap4ElstAtom.cpp has an attempted excessive memory allocation related to AP4Array::EnsureCapacity in Core/Ap4Array.h, as demonstrated by mp42hls...

CVE-2019-6966

An issue was discovered in Bento4 1.5.1-628. The AP4ElstAtom class in Core/Ap4ElstAtom.cpp has an attempted excessive memory allocation related to AP4Array::EnsureCapacity in Core/Ap4Array.h, as demonstrated by mp42hls...

CVE-2019-6966

An issue was discovered in Bento4 1.5.1-628. The AP4ElstAtom class in Core/Ap4ElstAtom.cpp has an attempted excessive memory allocation related to AP4Array::EnsureCapacity in Core/Ap4Array.h, as demonstrated by mp42hls...

CVE-2019-6966

An issue was discovered in Bento4 1.5.1-628. The AP4ElstAtom class in Core/Ap4ElstAtom.cpp has an attempted excessive memory allocation related to AP4Array::EnsureCapacity in Core/Ap4Array.h, as demonstrated by mp42hls...

Memory corruption

An issue was discovered in Bento4 1.5.1-628. The AP4ElstAtom class in Core/Ap4ElstAtom.cpp has an attempted excessive memory allocation related to AP4Array::EnsureCapacity in Core/Ap4Array.h, as demonstrated by mp42hls...

CVE-2019-6966

An issue was discovered in Bento4 1.5.1-628. The AP4ElstAtom class in Core/Ap4ElstAtom.cpp has an attempted excessive memory allocation related to AP4Array::EnsureCapacity in Core/Ap4Array.h, as demonstrated by mp42hls...

CVE-2019-6966

The provided connected documents confirm a concrete issue in Bento4 1.5.1-628 involving the AP4_ElstAtom class (Core/Ap4ElstAtom.cpp) and AP4_Array::EnsureCapacity in Core/Ap4Array.h. This memory allocation problem can lead to excessive memory usage and is described as an excessive memory allocat...

CVE-2019-6132

An issue was discovered in Bento4 v1.5.1-627. There is a memory leak in AP4DescriptorFactory::CreateDescriptorFromStream in Core/Ap4DescriptorFactory.cpp when called from the AP4EsdsAtom class in Core/Ap4EsdsAtom.cpp, as demonstrated by mp42aac...

CVE-2019-6132

An issue was discovered in Bento4 v1.5.1-627. There is a memory leak in AP4DescriptorFactory::CreateDescriptorFromStream in Core/Ap4DescriptorFactory.cpp when called from the AP4EsdsAtom class in Core/Ap4EsdsAtom.cpp, as demonstrated by mp42aac...

Memory corruption

An issue was discovered in Bento4 v1.5.1-627. There is a memory leak in AP4DescriptorFactory::CreateDescriptorFromStream in Core/Ap4DescriptorFactory.cpp when called from the AP4EsdsAtom class in Core/Ap4EsdsAtom.cpp, as demonstrated by mp42aac...

UBUNTU-CVE-2019-6132

An issue was discovered in Bento4 v1.5.1-627. There is a memory leak in AP4DescriptorFactory::CreateDescriptorFromStream in Core/Ap4DescriptorFactory.cpp when called from the AP4EsdsAtom class in Core/Ap4EsdsAtom.cpp, as demonstrated by mp42aac...