CVE-2018-14532: Out-of-bounds Read

An issue was discovered in Bento4 1.5.1-624. There is a heap-based buffer over-read in AP4Mpeg2TsVideoSampleStream::WriteSample in Core/Ap4Mpeg2Ts.cpp after a call from Mp42Hls.cpp, a related issue to CVE-2018-13846...

PT-2018-12575

Name of the Vulnerable Software and Affected Versions Bento4 version 1.5.1-624 Description The issue is related to an invalid memory read bug in the AP4 SampleDescription::GetType function in Ap4SampleDescription.h. This can be exploited by attackers to cause a denial-of-service via a crafted mp4...

PT-2018-12569

Name of the Vulnerable Software and Affected Versions Bento4 version 1.5.1-624 Description A heap-based buffer over-read issue was discovered in the AP4 Mpeg2TsVideoSampleStream::WriteSample function, located in Core/Ap4Mpeg2Ts.cpp, which is called from Mp42Hls.cpp. Recommendations For Bento4...

CVE-2018-14544: Out-of-bounds Read

There exists one invalid memory read bug in AP4SampleDescription::GetFormat in Ap4SampleDescription.h in Bento4 1.5.1-624, which can allow attackers to cause a denial-of-service via a crafted mp4 file. This vulnerability can be triggered by the executable mp42ts...

CVE-2018-14531: Improper Restriction of Operations within the Bounds of a Memory Buffer

An issue was discovered in Bento4 1.5.1-624. There is an unspecified "heap-buffer-overflow" crash in the AP4HvccAtom class in Core/Ap4HvccAtom.cpp...

UBUNTU-CVE-2018-14445

In Bento4 v1.5.1-624, AP4File::ParseStream in Ap4File.cpp allows remote attackers to cause a denial of service infinite loop via a crafted MP4 file...

Design/Logic Flaw

In Bento4 v1.5.1-624, AP4File::ParseStream in Ap4File.cpp allows remote attackers to cause a denial of service infinite loop via a crafted MP4 file...

CVE-2018-14445

In Bento4 v1.5.1-624, AP4File::ParseStream in Ap4File.cpp allows remote attackers to cause a denial of service infinite loop via a crafted MP4 file...

CVE-2018-14445

In Bento4 v1.5.1-624, AP4File::ParseStream in Ap4File.cpp allows remote attackers to cause a denial of service infinite loop via a crafted MP4 file...

CVE-2018-14445

In Bento4 v1.5.1-624, AP4File::ParseStream in Ap4File.cpp allows remote attackers to cause a denial of service infinite loop via a crafted MP4 file...

CVE-2018-14445

In Bento4 v1.5.1-624, AP4File::ParseStream in Ap4File.cpp allows remote attackers to cause a denial of service infinite loop via a crafted MP4 file...

CVE-2018-14445

Summary: Bento4 library (v1.5.1-624) contains a vulnerability in AP4_File::ParseStream (Ap4File.cpp) that allows remote attackers to cause a denial of service (infinite loop) via a crafted MP4 file. The issue is documented across multiple sources (NVD, CNVD, OSV, Ubuntu listings). The connected d...

CVE-2018-14445

In Bento4 v1.5.1-624, AP4File::ParseStream in Ap4File.cpp allows remote attackers to cause a denial of service infinite loop via a crafted MP4 file...

PT-2018-12522

Name of the Vulnerable Software and Affected Versions Bento4 version 1.5.1-624 Description The issue allows remote attackers to cause a denial of service, specifically an infinite loop, by providing a crafted MP4 file. This is due to a problem in the AP4 File::ParseStream function located in...

CVE-2018-14445: Loop with Unreachable Exit Condition

In Bento4 v1.5.1-624, AP4File::ParseStream in Ap4File.cpp allows remote attackers to cause a denial of service infinite loop via a crafted MP4 file...

Design/Logic Flaw

An issue has been found in Bento4 1.5.1-624. It is a SEGV in AP4StcoAtom::AdjustChunkOffsets in Core/Ap4StcoAtom.cpp...

CVE-2018-13848

An issue has been found in Bento4 1.5.1-624. It is a SEGV in AP4StszAtom::GetSampleSize in Core/Ap4StszAtom.cpp...

Design/Logic Flaw

An issue has been found in Bento4 1.5.1-624. It is a SEGV in AP4StszAtom::GetSampleSize in Core/Ap4StszAtom.cpp...

Heap overflow

An issue has been found in Bento4 1.5.1-624. AP4Mpeg2TsVideoSampleStream::WriteSample in Core/Ap4Mpeg2Ts.cpp has a heap-based buffer over-read after a call from Mp42Ts.cpp, a related issue to CVE-2018-14532...

UBUNTU-CVE-2018-13846

An issue has been found in Bento4 1.5.1-624. AP4Mpeg2TsVideoSampleStream::WriteSample in Core/Ap4Mpeg2Ts.cpp has a heap-based buffer over-read after a call from Mp42Ts.cpp, a related issue to CVE-2018-14532...