CVE-2017-14646

The AP4AvccAtom and AP4HvccAtom classes in Bento4 version 1.5.0-617 do not properly validate data sizes, leading to a heap-based buffer over-read and application crash in AP4DataBuffer::SetData in Core/Ap4DataBuffer.cpp...

PT-2017-13606

Name of the Vulnerable Software and Affected Versions Bento4 version 1.5.0-617 Description A heap-based buffer over-read was discovered in the AP4 BitStream::ReadBytes function in Codecs/Ap4BitStream.cpp. This issue causes an application crash, leading to a remote denial of service. Recommendatio...

PT-2017-13602

Name of the Vulnerable Software and Affected Versions Bento4 version 1.5.0-617 Description A NULL pointer dereference was discovered in the AP4 DataAtom class, which causes a segmentation fault and application crash. This leads to a remote denial of service. Recommendations For Bento4 version...

PT-2017-13605

Name of the Vulnerable Software and Affected Versions Bento4 version 1.5.0-617 Description A heap-based buffer overflow was discovered in the AP4 HdlrAtom class, causing an out-of-bounds write. This issue can lead to remote denial of service or possibly code execution. Recommendations For Bento4...

PT-2017-13604

Name of the Vulnerable Software and Affected Versions Bento4 version 1.5.0-617 Description The issue arises from the AP4 HdlrAtom class in Core/Ap4HdlrAtom.cpp, which uses an incorrect character data type. This leads to a heap-based buffer over-read and application crash in the AP4 BytesToUInt32B...

CVE-2017-14647: Out-of-bounds Write

A heap-based buffer overflow was discovered in AP4VisualSampleEntry::ReadFields in Core/Ap4SampleEntry.cpp in Bento4 1.5.0-617. The vulnerability causes an out-of-bounds write, which leads to remote denial of service or possibly code execution...

CVE-2017-14642: NULL Pointer Dereference

A NULL pointer dereference was discovered in the AP4HdlrAtom class in Bento4 version 1.5.0-617. The vulnerability causes a segmentation fault and application crash in AP4StdcFileByteStream::ReadPartial in System/StdC/Ap4StdCFileByteStream.cpp, which leads to remote denial of service...

PT-2017-13607

Name of the Vulnerable Software and Affected Versions Bento4 version 1.5.0-617 Description The issue arises from improper data size validation in the AP4 AvccAtom and AP4 HvccAtom classes, resulting in a heap-based buffer over-read and application crash in the AP4 DataBuffer::SetData function...

PT-2017-13608

Name of the Vulnerable Software and Affected Versions Bento4 version 1.5.0-617 Description A heap-based buffer overflow was discovered in the AP4 VisualSampleEntry::ReadFields function in Core/Ap4SampleEntry.cpp. This issue causes an out-of-bounds write, potentially leading to remote denial of...

PT-2017-13600

Name of the Vulnerable Software and Affected Versions Bento4 version 1.5.0-617 Description The issue is caused by incorrect character data types used in the AP4 VisualSampleEntry::ReadFields function in Core/Ap4SampleEntry.cpp. This leads to a stack-based buffer underflow and out-of-bounds write,...

CVE-2017-14643: Out-of-bounds Read

The AP4HdlrAtom class in Core/Ap4HdlrAtom.cpp in Bento4 version 1.5.0-617 uses an incorrect character data type, leading to a heap-based buffer over-read and application crash in AP4BytesToUInt32BE in Core/Ap4Utils.h...

CVE-2017-14641: NULL Pointer Dereference

A NULL pointer dereference was discovered in the AP4DataAtom class in MetaData/Ap4MetaData.cpp in Bento4 version 1.5.0-617. The vulnerability causes a segmentation fault and application crash, which leads to remote denial of service...

CVE-2017-14638: NULL Pointer Dereference

AP4AtomFactory::CreateAtomFromStream in Core/Ap4AtomFactory.cpp in Bento4 version 1.5.0-617 has missing NULL checks, leading to a NULL pointer dereference, segmentation fault, and application crash in AP4Atom::SetType in Core/Ap4Atom.h...

PT-2017-13603

Name of the Vulnerable Software and Affected Versions Bento4 version 1.5.0-617 Description A NULL pointer dereference was discovered in the AP4 HdlrAtom class, causing a segmentation fault and application crash in AP4 StdcFileByteStream::ReadPartial, which leads to remote denial of service...

CVE-2017-14640: NULL Pointer Dereference

A NULL pointer dereference was discovered in AP4AtomSampleTable::GetSample in Core/Ap4AtomSampleTable.cpp in Bento4 version 1.5.0-617. The vulnerability causes a segmentation fault and application crash, which leads to remote denial of service...

CVE-2017-14644: Out-of-bounds Write

A heap-based buffer overflow was discovered in the AP4HdlrAtom class in Bento4 1.5.0-617. The vulnerability causes an out-of-bounds write, which leads to remote denial of service or possibly code execution...

CVE-2017-14645: Out-of-bounds Read

A heap-based buffer over-read was discovered in AP4BitStream::ReadBytes in Codecs/Ap4BitStream.cpp in Bento4 version 1.5.0-617. The vulnerability causes an application crash, which leads to remote denial of service...

CVE-2017-14646: Out-of-bounds Read

The AP4AvccAtom and AP4HvccAtom classes in Bento4 version 1.5.0-617 do not properly validate data sizes, leading to a heap-based buffer over-read and application crash in AP4DataBuffer::SetData in Core/Ap4DataBuffer.cpp...

PT-2017-13599

Name of the Vulnerable Software and Affected Versions Bento4 version 1.5.0-617 Description The issue is related to missing NULL checks in the AP4 AtomFactory::CreateAtomFromStream function, which can lead to a NULL pointer dereference, resulting in a segmentation fault and application crash in th...

PT-2017-13601

Name of the Vulnerable Software and Affected Versions Bento4 version 1.5.0-617 Description A NULL pointer dereference was discovered in the AP4 AtomSampleTable::GetSample function in Core/Ap4AtomSampleTable.cpp, which causes a segmentation fault and application crash. This leads to a remote denia...