CVE-2018-14586

CVE-2018-14586, described in the provided materials, concerns Bento4 1.5.1-624. The issue is a SEGV in AP4_Mpeg2TsAudioSampleStream::WriteSample (Core/Ap4Mpeg2Ts.cpp), and is explicitly stated to be a different vulnerability from CVE-2018-14532. The connected documents confirm Bento4 as the affec...

CVE-2018-14590

Bento4 1.5.1-624 is affected by a SEGV in AP4_Processor::ProcessFragments (Core/Ap4Processor.cpp). The issue is a crash rather than an explicit code path described as exploitable; public details consistently identify a segmentation fault in that function. The available documents do not specify a ...

CVE-2018-14584

CVE-2018-14584 affects Bento4 1.5.1-624, where the vulnerable code path is AP4_AvccAtom::Create in Core/Ap4AvccAtom.cpp, causing a heap-based buffer over-read. This is documented across multiple sources (NVD entry and CNVD/OSV/etc.), with CVSS scores indicating substantial impact (NVD: 2.0/3.0 ve...

CVE-2018-14585

An issue has been discovered in Bento4 1.5.1-624. AP4BytesToUInt16BE in Core/Ap4Utils.h has a heap-based buffer over-read after a call from the AP4Stz2Atom class...

CVE-2018-14588

Bento4 1.5.1-624 has a vulnerability: a NULL pointer dereference in AP4_DataBuffer::SetData (Core/Ap4DataBuffer.cpp). This CVE-2018-14588 is documented across multiple feeds (NVD entry and CNVD/OSV variants) and is consistently described as enabling a NULL pointer dereference in the data buffer s...

CVE-2018-14589

Bento4 1.5.1-624 contains a heap-based buffer over-read in AP4_Mp4AudioDsiParser::ReadBits (Codecs/Ap4Mp4AudioInfo.cpp). The issue is confirmed across multiple sources (NVD/CVE-2018-14589, CNVD/UBUNTU, osv, etc.), but the connected documents do not provide an approved remediation or patch details...

CVE-2018-14589

An issue has been discovered in Bento4 1.5.1-624. AP4Mp4AudioDsiParser::ReadBits in Codecs/Ap4Mp4AudioInfo.cpp has a heap-based buffer over-read...

CVE-2018-14586

An issue has been discovered in Bento4 1.5.1-624. A SEGV can occur in AP4Mpeg2TsAudioSampleStream::WriteSample in Core/Ap4Mpeg2Ts.cpp, a different vulnerability than CVE-2018-14532...

CVE-2018-14585

The vulnerability CVE-2018-14585 affects Bento4 1.5.1-624, specifically AP4_BytesToUInt16BE in Core/Ap4Utils.h, which suffers a heap-based buffer over-read triggered via AP4_Stz2Atom. The issue is a memory-safety flaw within Bento4’s MP4 I/O utilities. Public references in the provided connected ...

CVE-2018-14584

An issue has been discovered in Bento4 1.5.1-624. AP4AvccAtom::Create in Core/Ap4AvccAtom.cpp has a heap-based buffer over-read...

CVE-2018-14588

An issue has been discovered in Bento4 1.5.1-624. A NULL pointer dereference can occur in AP4DataBuffer::SetData in Core/Ap4DataBuffer.cpp...

CVE-2018-14587

CVE-2018-14587 : Technical details in provided sources show Bento4 version 1.5.1-624 is affected by a buffer over-read in AP4_MemoryByteStream::WritePartial (Core/Ap4ByteStream.cpp). This vulnerability is confirmed across multiple external databases (NVD, CNVD, osv OSV) and vendor ecosystems, whi...

CVE-2018-14590

An issue has been discovered in Bento4 1.5.1-624. A SEGV can occur in AP4Processor::ProcessFragments in Core/Ap4Processor.cpp...

CVE-2018-14545

There exists one invalid memory read bug in AP4SampleDescription::GetType in Ap4SampleDescription.h in Bento4 1.5.1-624, which can allow attackers to cause a denial-of-service via a crafted mp4 file. This vulnerability can be triggered by the executable mp42ts...

CVE-2018-14531

An issue was discovered in Bento4 1.5.1-624. There is an unspecified "heap-buffer-overflow" crash in the AP4HvccAtom class in Core/Ap4HvccAtom.cpp...

CVE-2018-14544

There exists one invalid memory read bug in AP4SampleDescription::GetFormat in Ap4SampleDescription.h in Bento4 1.5.1-624, which can allow attackers to cause a denial-of-service via a crafted mp4 file. This vulnerability can be triggered by the executable mp42ts...

CVE-2018-14545

There exists one invalid memory read bug in AP4SampleDescription::GetType in Ap4SampleDescription.h in Bento4 1.5.1-624, which can allow attackers to cause a denial-of-service via a crafted mp4 file. This vulnerability can be triggered by the executable mp42ts...

CVE-2018-14531

An issue was discovered in Bento4 1.5.1-624. There is an unspecified "heap-buffer-overflow" crash in the AP4HvccAtom class in Core/Ap4HvccAtom.cpp...

CVE-2018-14543

There exists one NULL pointer dereference vulnerability in AP4JsonInspector::AddField in Ap4Atom.cpp in Bento4 1.5.1-624, which can allow attackers to cause a denial-of-service via a crafted mp4 file. This vulnerability can be triggered by the executable mp4dump...

CVE-2018-14543

There exists one NULL pointer dereference vulnerability in AP4JsonInspector::AddField in Ap4Atom.cpp in Bento4 1.5.1-624, which can allow attackers to cause a denial-of-service via a crafted mp4 file. This vulnerability can be triggered by the executable mp4dump...