CVE-2018-20409

CVE-2018-20409 affects Bento4 1.5.1-627. There is a heap-based buffer over-read in AP4_AvccAtom::Create (Core/Ap4AvccAtom.cpp), demonstrated by mp42hls. The vulnerability is documented across multiple feeds (NVD/Red Hat/CNVD/OSV entries). No patch/version remediation details are provided in the s...

CVE-2018-20407

An issue was discovered in Bento4 1.5.1-627. There is a memory leak in AP4DescriptorFactory::CreateDescriptorFromStream in Core/Ap4DescriptorFactory.cpp, as demonstrated by mp42hls...

CVE-2018-20407

CVE-2018-20407 affects Bento4 1.5.1-627. The issue is a memory leak in AP4_DescriptorFactory::CreateDescriptorFromStream (Core/Ap4DescriptorFactory.cpp), as demonstrated by mp42hls. This vulnerability is documented across multiple feeds (NVD entry and various vendor/space records) consistently de...

CVE-2018-20408

An issue was discovered in Bento4 1.5.1-627. There is a memory leak in AP4StdcFileByteStream::Create in System/StdC/Ap4StdCFileByteStream.cpp, as demonstrated by mp42hls...

Bento4 Excessive Memory Allocation Vulnerability

Bento4 is a C++ class library and tool for reading and writing ISO-MP4 files. Bento4 1.5.1-627 suffers from an excessive memory allocation vulnerability that can be exploited by an attacker to trigger an attempt at excessive memory allocation via AP4Sample::ReadData in Core/Ap4Sample.cpp...

CVE-2018-20186

An issue was discovered in Bento4 1.5.1-627. AP4Sample::ReadData in Core/Ap4Sample.cpp allows attackers to trigger an attempted excessive memory allocation, related to AP4DataBuffer::SetDataSize and AP4DataBuffer::ReallocateBuffer in Core/Ap4DataBuffer.cpp...

CVE-2018-20186

An issue was discovered in Bento4 1.5.1-627. AP4Sample::ReadData in Core/Ap4Sample.cpp allows attackers to trigger an attempted excessive memory allocation, related to AP4DataBuffer::SetDataSize and AP4DataBuffer::ReallocateBuffer in Core/Ap4DataBuffer.cpp...

Memory corruption

An issue was discovered in Bento4 1.5.1-627. AP4Sample::ReadData in Core/Ap4Sample.cpp allows attackers to trigger an attempted excessive memory allocation, related to AP4DataBuffer::SetDataSize and AP4DataBuffer::ReallocateBuffer in Core/Ap4DataBuffer.cpp...

CVE-2018-20186

An issue was discovered in Bento4 1.5.1-627. AP4Sample::ReadData in Core/Ap4Sample.cpp allows attackers to trigger an attempted excessive memory allocation, related to AP4DataBuffer::SetDataSize and AP4DataBuffer::ReallocateBuffer in Core/Ap4DataBuffer.cpp...

UBUNTU-CVE-2018-20186

An issue was discovered in Bento4 1.5.1-627. AP4Sample::ReadData in Core/Ap4Sample.cpp allows attackers to trigger an attempted excessive memory allocation, related to AP4DataBuffer::SetDataSize and AP4DataBuffer::ReallocateBuffer in Core/Ap4DataBuffer.cpp...

CVE-2018-20186

An issue was discovered in Bento4 1.5.1-627. AP4Sample::ReadData in Core/Ap4Sample.cpp allows attackers to trigger an attempted excessive memory allocation, related to AP4DataBuffer::SetDataSize and AP4DataBuffer::ReallocateBuffer in Core/Ap4DataBuffer.cpp...

CVE-2018-20186

CVE-2018-20186 affects Bento4 1.5.1-627. The issue is in AP4_Sample::ReadData in Core/Ap4Sample.cpp, which allows attackers to trigger an attempted excessive memory allocation via AP4_DataBuffer::SetDataSize and AP4_DataBuffer::ReallocateBuffer in Core/Ap4DataBuffer.cpp. The documented impact is ...

Unspecified Vulnerability in Bento4

Bento4 is an open source C++ library for reading and writing MP4 files. A security vulnerability exists in the EnsureCapacity method of the Core/Ap4Array.h file in Bento4 version 1.5.1-627. An attacker can exploit the vulnerability to allocate a large amount of memory with the help of specially...

UBUNTU-CVE-2018-20095

An issue was discovered in EnsureCapacity in Core/Ap4Array.h in Bento4 1.5.1-627. Crafted MP4 input triggers an attempt at excessive memory allocation, as demonstrated by mp42hls...

CVE-2018-20095

An issue was discovered in EnsureCapacity in Core/Ap4Array.h in Bento4 1.5.1-627. Crafted MP4 input triggers an attempt at excessive memory allocation, as demonstrated by mp42hls...

CVE-2018-20095

CVE-2018-20095 affects Bento4 1.5.1-627, where a bug in EnsureCapacity within Core/Ap4Array.h can trigger excessive memory allocation on crafted MP4 input (e.g., mp42hls). The vulnerability is tied to the AP4_Array::EnsureCapacity routine, leading to potential denial of service or resource exhaus...

Bento4 Ap4File.cpp File Denial of Service Vulnerability

Bento4 is an open source C++ library for reading and writing MP4 files. A security vulnerability exists in the 'AP4File::ParseStream' function of the Ap4File.cpp file in Bento4 version 1.5.1-624. A remote attacker can exploit this vulnerability to cause a denial of service infinite loop with the...

Bento4 Buffer Overflow Vulnerability

Bento4 is an open source C++ library for reading and writing MP4 files. A buffer overflow vulnerability exists in the AP4Mp4AudioDsiParser::ReadBits of the Codecs/Ap4Mp4AudioInfo.cpp file in Bento4 version 1.5.1-624. An attacker can exploit this vulnerability to cause heap buffer out-of-bounds...

Bento4 Buffer Overflow Vulnerability (CNVD-2018-14699)

Bento4 is an open source C++ library for reading and writing MP4 files. A heap buffer overflow vulnerability exists in AP4AvccAtom::Create in the Core/Ap4AvccAtom.cpp file in Bento4 version 1.5.1-624. An attacker can exploit this vulnerability to cause a heap buffer out-of-bounds read...

Bento4 Buffer Overflow Vulnerability (CNVD-2019-07062)

Bento4 is an open source C++ library for reading and writing MP4 files. A buffer overflow vulnerability exists in the 'AP4Mpeg2TsAudioSampleStream::WriteSample' function in the Core/Ap4Mpeg2Ts.cpp file in Bento4 version 1.5.1-624, which can be exploited by an attacker to can be exploited to cause...