CVE-2017-14645: Out-of-bounds Read

A heap-based buffer over-read was discovered in AP4BitStream::ReadBytes in Codecs/Ap4BitStream.cpp in Bento4 version 1.5.0-617. The vulnerability causes an application crash, which leads to remote denial of service...

CVE-2017-14639: Access of Resource Using Incompatible Type

AP4VisualSampleEntry::ReadFields in Core/Ap4SampleEntry.cpp in Bento4 1.5.0-617 uses incorrect character data types, which causes a stack-based buffer underflow and out-of-bounds write, leading to denial of service application crash or possibly unspecified other impact...

CVE-2017-14643: Out-of-bounds Read

The AP4HdlrAtom class in Core/Ap4HdlrAtom.cpp in Bento4 version 1.5.0-617 uses an incorrect character data type, leading to a heap-based buffer over-read and application crash in AP4BytesToUInt32BE in Core/Ap4Utils.h...

CVE-2017-14647: Out-of-bounds Write

A heap-based buffer overflow was discovered in AP4VisualSampleEntry::ReadFields in Core/Ap4SampleEntry.cpp in Bento4 1.5.0-617. The vulnerability causes an out-of-bounds write, which leads to remote denial of service or possibly code execution...

CVE-2017-14646: Out-of-bounds Read

The AP4AvccAtom and AP4HvccAtom classes in Bento4 version 1.5.0-617 do not properly validate data sizes, leading to a heap-based buffer over-read and application crash in AP4DataBuffer::SetData in Core/Ap4DataBuffer.cpp...

CVE-2017-14644: Out-of-bounds Write

A heap-based buffer overflow was discovered in the AP4HdlrAtom class in Bento4 1.5.0-617. The vulnerability causes an out-of-bounds write, which leads to remote denial of service or possibly code execution...

CVE-2017-14641: NULL Pointer Dereference

A NULL pointer dereference was discovered in the AP4DataAtom class in MetaData/Ap4MetaData.cpp in Bento4 version 1.5.0-617. The vulnerability causes a segmentation fault and application crash, which leads to remote denial of service...

CVE-2017-14638: NULL Pointer Dereference

AP4AtomFactory::CreateAtomFromStream in Core/Ap4AtomFactory.cpp in Bento4 version 1.5.0-617 has missing NULL checks, leading to a NULL pointer dereference, segmentation fault, and application crash in AP4Atom::SetType in Core/Ap4Atom.h...

CVE-2017-14640: NULL Pointer Dereference

A NULL pointer dereference was discovered in AP4AtomSampleTable::GetSample in Core/Ap4AtomSampleTable.cpp in Bento4 version 1.5.0-617. The vulnerability causes a segmentation fault and application crash, which leads to remote denial of service...

CVE-2017-14642: NULL Pointer Dereference

A NULL pointer dereference was discovered in the AP4HdlrAtom class in Bento4 version 1.5.0-617. The vulnerability causes a segmentation fault and application crash in AP4StdcFileByteStream::ReadPartial in System/StdC/Ap4StdCFileByteStream.cpp, which leads to remote denial of service...

Bento4 Core/Ap4AtomSampleTable.cpp file buffer overflow vulnerability

Bento4 is an open source C++ library for reading and writing MP4 files. A buffer overflow vulnerability exists in AP4AtomSampleTable::GetSample in the Core/Ap4AtomSampleTable.cpp file of the SDK in Bento4 version 1.5.0-616. A remote attacker can exploit this vulnerability to cause a denial of...

Bento4 Ap4StszAtom.cpp file buffer overflow vulnerability

Bento4 is an open source C++ library for reading and writing MP4 files. A buffer overflow vulnerability exists in the AP4StszAtom class of the Ap4StszAtom.cpp file of the SDK in Bento4 version 1.5.0-616. A remote attacker can exploit this vulnerability to cause a denial of service or execute...

Bento4 Ap4StssAtom.cpp File Command Execution Vulnerability

Bento4 is an open source C++ library for reading and writing MP4 files.SDK is one of the software development kits. A security vulnerability exists in the AP4StssAtom class of the Ap4StssAtom.cpp file of the SDK in Bento4 version 1.5.0-616. The vulnerability can be exploited by an attacker with t...

Bento4 Core/Ap4StscAtom.h File Command Execution Vulnerability

Bento4 is an open source C++ library for reading and writing MP4 files.SDK is one of the software development kits. A security vulnerability exists in SetItemCount in the Core/Ap4StscAtom.h file of the SDK in Bento4 version 1.5.0-616. An attacker can exploit this vulnerability to execute arbitrar...

Design/Logic Flaw

In the SDK in Bento4 1.5.0-616, the AP4StszAtom class in Ap4StszAtom.cpp file contains a Read Memory Access Violation vulnerability. It is possible to exploit this vulnerability by opening a crafted .MP4 file...

CVE-2017-14260

In the SDK in Bento4 1.5.0-616, the AP4StssAtom class in Ap4StssAtom.cpp contains a Write Memory Access Violation vulnerability. It is possible to exploit this vulnerability and possibly execute arbitrary code by opening a crafted .MP4 file...

Design/Logic Flaw

In the SDK in Bento4 1.5.0-616, the AP4StssAtom class in Ap4StssAtom.cpp contains a Write Memory Access Violation vulnerability. It is possible to exploit this vulnerability and possibly execute arbitrary code by opening a crafted .MP4 file...

CVE-2017-14259

In the SDK in Bento4 1.5.0-616, the AP4StscAtom class in Ap4StscAtom.cpp contains a Write Memory Access Violation vulnerability. It is possible to exploit this vulnerability and possibly execute arbitrary code by opening a crafted .MP4 file...

CVE-2017-14257

In the SDK in Bento4 1.5.0-616, AP4AtomSampleTable::GetSample in Core/Ap4AtomSampleTable.cpp contains a Read Memory Access Violation vulnerability. It is possible to exploit this vulnerability by opening a crafted .MP4 file...

UBUNTU-CVE-2017-14261

In the SDK in Bento4 1.5.0-616, the AP4StszAtom class in Ap4StszAtom.cpp file contains a Read Memory Access Violation vulnerability. It is possible to exploit this vulnerability by opening a crafted .MP4 file...