PT-2018-12221

Name of the Vulnerable Software and Affected Versions Bento4 version 1.5.1-624 Description A issue has been found in the software, specifically a SEGV in AP4 StszAtom::GetSampleSize in Core/Ap4StszAtom.cpp. Recommendations For version 1.5.1-624, at the moment, there is no information about a newe...

PT-2018-12220

Name of the Vulnerable Software and Affected Versions Bento4 version 1.5.1-624 Description A issue has been found in the software, which is a SEGV in AP4 StcoAtom::AdjustChunkOffsets in Core/Ap4StcoAtom.cpp. Recommendations For Bento4 version 1.5.1-624, at the moment, there is no information abou...

PT-2018-12219

Name of the Vulnerable Software and Affected Versions Bento4 version 1.5.1-624 Description A heap-based buffer over-read issue has been discovered in the AP4 Mpeg2TsVideoSampleStream::WriteSample function, located in Core/Ap4Mpeg2Ts.cpp. This issue occurs after a call from Mp42Ts.cpp...

CVE-2018-13848: Improper Restriction of Operations within the Bounds of a Memory Buffer

An issue has been found in Bento4 1.5.1-624. It is a SEGV in AP4StszAtom::GetSampleSize in Core/Ap4StszAtom.cpp...

CVE-2018-13846: Out-of-bounds Read

An issue has been found in Bento4 1.5.1-624. AP4Mpeg2TsVideoSampleStream::WriteSample in Core/Ap4Mpeg2Ts.cpp has a heap-based buffer over-read after a call from Mp42Ts.cpp, a related issue to CVE-2018-14532...

Bento4 Denial of Service Vulnerability

Bento4 is a C++ class library and tool for reading and writing ISO-MP4 files. A denial of service vulnerability exists in the AP4FtypAtom class in Core/Ap4FtypAtom.cpp in Bento4 1.5.1.0. An attacker can exploit this vulnerability to cause a denial of service by triggering a specially crafted MP4...

Design/Logic Flaw

The AP4FtypAtom class in Core/Ap4FtypAtom.cpp in Bento4 1.5.1.0 has an Infinite loop via a crafted MP4 file that triggers size mishandling...

CVE-2018-5253

The AP4FtypAtom class in Core/Ap4FtypAtom.cpp in Bento4 1.5.1.0 has an Infinite loop via a crafted MP4 file that triggers size mishandling...

CVE-2018-5253

The AP4FtypAtom class in Core/Ap4FtypAtom.cpp in Bento4 1.5.1.0 has an Infinite loop via a crafted MP4 file that triggers size mishandling...

UBUNTU-CVE-2018-5253

The AP4FtypAtom class in Core/Ap4FtypAtom.cpp in Bento4 1.5.1.0 has an Infinite loop via a crafted MP4 file that triggers size mishandling...

CVE-2018-5253

The AP4FtypAtom class in Core/Ap4FtypAtom.cpp in Bento4 1.5.1.0 has an Infinite loop via a crafted MP4 file that triggers size mishandling...

CVE-2018-5253

The provided CVE-2018-5253 entries (NVD/Red Hat/Ubuntu/CNVD/OSV) consistently identify Bento4 1.5.1.0’s AP4_FtypAtom.cpp as vulnerable to an infinite loop caused by crafted MP4 files triggering size mishandling. The issue is in a C++ library used for reading/writing ISO-MP4; the exact root cause ...

CVE-2018-5253

The AP4FtypAtom class in Core/Ap4FtypAtom.cpp in Bento4 1.5.1.0 has an Infinite loop via a crafted MP4 file that triggers size mishandling...

CVE-2018-5253: Loop with Unreachable Exit Condition

The AP4FtypAtom class in Core/Ap4FtypAtom.cpp in Bento4 1.5.1.0 has an Infinite loop via a crafted MP4 file that triggers size mishandling...

PT-2018-16841

Name of the Vulnerable Software and Affected Versions Bento4 version 1.5.1.0 Description The issue is related to an infinite loop in the AP4 FtypAtom class, which can be triggered by a crafted MP4 file. This occurs due to size mishandling in the Core/Ap4FtypAtom.cpp component of Bento4...

Bento4 'AP4_BitStream::ReadBytes' Heap Buffer Overflow Vulnerability

Bento4 is an open source C++ library for reading and writing MP4 files. A security vulnerability exists in AP4BitStream::ReadBytes in the Codecs/Ap4BitStream.cpp file in Bento4 version 1.5.0-617. A remote attacker can exploit this vulnerability to cause a denial of service heap buffer out-of-boun...

Bento4 AP4_AvccAtom and AP4_HvccAtom Class Heap Buffer Overflow Vulnerability

Bento4 is an open source C++ library for reading and writing MP4 files. A security vulnerability exists in the AP4AvccAtom and AP4HvccAtom classes in Bento4 version 1.5.0-617, which stems from the program's failure to properly validate the size of data. An attacker could exploit this vulnerabilit...

Bento4 Core/Ap4SampleEntry.cpp File Heap Buffer Overflow Vulnerability

Bento4 is an open source C++ library for reading and writing MP4 files. A heap buffer overflow vulnerability exists in AP4VisualSampleEntry::ReadFields in the Core/Ap4SampleEntry.cpp file in Bento4 version 1.5.0-617. A remote attacker could exploit this vulnerability to cause a denial of service ...

Bento4 AP4_HdlrAtom Class Heap Buffer Overflow Vulnerability

Bento4 is an open source C++ library for reading and writing MP4 files. A heap buffer overflow vulnerability exists in the AP4HdlrAtom class in Bento4 version 1.5.0-617. A remote attacker can exploit this vulnerability to cause a denial of service or possibly execute code write across boundaries...

Bento4 MetaData/Ap4MetaData.cpp File Null Pointer Reference Vulnerability

Bento4 is an open source C++ library for reading and writing MP4 files. A security vulnerability exists in the AP4DataAtom class of the MetaData/Ap4MetaData.cpp file in Bento4 version 1.5.0-617. A remote attacker can exploit this vulnerability to cause a denial of service null pointer...