CVE-2018-14531

CVE-2018-14531 concerns Bento4 1.5.1-624, where an unspecified heap-buffer-overflow crash occurs in the AP4_HvccAtom.cpp (Core/Ap4HvccAtom.cpp). The Connected documents describe a different but related issue in Bento4 (CVE-2022-27607: a heap-based buffer over-read in the same AP4_HvccAtom class f...

CVE-2018-14531

An issue was discovered in Bento4 1.5.1-624. There is an unspecified "heap-buffer-overflow" crash in the AP4HvccAtom class in Core/Ap4HvccAtom.cpp...

CVE-2018-14543

There exists one NULL pointer dereference vulnerability in AP4JsonInspector::AddField in Ap4Atom.cpp in Bento4 1.5.1-624, which can allow attackers to cause a denial-of-service via a crafted mp4 file. This vulnerability can be triggered by the executable mp4dump...

CVE-2018-14545

There are concrete details for CVE-2018-14545: Bento4 version 1.5.1-624 contains an invalid memory read in AP4_SampleDescription::GetType() (Ap4SampleDescription.h) that can cause a denial-of-service when processing crafted MP4 files, with exploitation potentially triggered by the mp42ts executab...

CVE-2018-14543

CVE-2018-14543 describes a NULL pointer dereference vulnerability in Bento4 1.5.1-624, specifically in AP4_JsonInspector::AddField (Ap4Atom.cpp). A crafted MP4 file can trigger this via the mp4dump executable, causing denial of service. The available connected documents confirm the affected compo...

CVE-2018-14544

There exists one invalid memory read bug in AP4SampleDescription::GetFormat in Ap4SampleDescription.h in Bento4 1.5.1-624, which can allow attackers to cause a denial-of-service via a crafted mp4 file. This vulnerability can be triggered by the executable mp42ts...

CVE-2018-14545

There exists one invalid memory read bug in AP4SampleDescription::GetType in Ap4SampleDescription.h in Bento4 1.5.1-624, which can allow attackers to cause a denial-of-service via a crafted mp4 file. This vulnerability can be triggered by the executable mp42ts...

CVE-2018-14532

CVE-2018-14532 affects Bento4 1.5.1-624. There is a heap-based buffer over-read in AP4_Mpeg2TsVideoSampleStream::WriteSample (Core/Ap4Mpeg2Ts.cpp) after a call from Mp42Hls.cpp. This issue is related to CVE-2018-13846. The available connected documents confirm the affected component and function,...

Bento4 Invalid Memory Read Vulnerability

Bento4 is a C++ class library and tool for reading and writing ISO-MP4 files. An invalid memory read vulnerability exists in AP4SampleDescription::GetType in Ap4SampleDescription.h in Bento4 1.5.1-624, which can be exploited by an attacker to cause a denial of service via specially crafted mp4...

Bento4 Null Pointer Dereference Vulnerability

Bento4 is a C++ class library and tool for reading and writing ISO-MP4 files. A null pointer dereference vulnerability exists in AP4JsonInspector::AddField in Ap4Atom.cpp in Bento4 1.5.1-624, which can be exploited by an attacker to cause a denial of service via specially crafted mp4 files...

Bento4 Buffer Out-of-Bounds Read Vulnerability

Bento4 is an open source C++ library for reading and writing MP4 files. A heap buffer out-of-bounds read vulnerability exists in the 'AP4Mpeg2TsVideoSampleStream::WriteSample' function in the Core/Ap4Mpeg2Ts.cpp file in Bento4 version 1.5.1-624, which can be exploited by an attacker to execute...

Bento4 Buffer Overflow Vulnerability (CNVD-2019-05132)

Bento4 is a C++ class library and tool for reading and writing ISO-MP4 files. A heap buffer overflow vulnerability exists in the AP4HvccAtom class in Core/Ap4HvccAtom.cpp in Bento4 1.5.1-624, which can be exploited by an attacker to cause a denial of service...

Bento4 Invalid Memory Read Vulnerability (CNVD-2019-05129)

Bento4 is a C++ class library and tool for reading and writing ISO-MP4 files. An invalid memory read vulnerability exists in AP4SampleDescription::GetFormat in Ap4SampleDescription.h in Bento4 1.5.1-624, which can be exploited by an attacker to cause a denial of service via specially crafted mp4...

CVE-2018-14445

In Bento4 v1.5.1-624, AP4File::ParseStream in Ap4File.cpp allows remote attackers to cause a denial of service infinite loop via a crafted MP4 file...

CVE-2018-14445

In Bento4 v1.5.1-624, AP4File::ParseStream in Ap4File.cpp allows remote attackers to cause a denial of service infinite loop via a crafted MP4 file...

Design/Logic Flaw

In Bento4 v1.5.1-624, AP4File::ParseStream in Ap4File.cpp allows remote attackers to cause a denial of service infinite loop via a crafted MP4 file...

UBUNTU-CVE-2018-14445

In Bento4 v1.5.1-624, AP4File::ParseStream in Ap4File.cpp allows remote attackers to cause a denial of service infinite loop via a crafted MP4 file...

CVE-2018-14445

In Bento4 v1.5.1-624, AP4File::ParseStream in Ap4File.cpp allows remote attackers to cause a denial of service infinite loop via a crafted MP4 file...

CVE-2018-14445

Summary: Bento4 library (v1.5.1-624) contains a vulnerability in AP4_File::ParseStream (Ap4File.cpp) that allows remote attackers to cause a denial of service (infinite loop) via a crafted MP4 file. The issue is documented across multiple sources (NVD, CNVD, OSV, Ubuntu listings). The connected d...

CVE-2018-14445

In Bento4 v1.5.1-624, AP4File::ParseStream in Ap4File.cpp allows remote attackers to cause a denial of service infinite loop via a crafted MP4 file...