CVE-2017-14257

In the SDK in Bento4 1.5.0-616, AP4AtomSampleTable::GetSample in Core/Ap4AtomSampleTable.cpp contains a Read Memory Access Violation vulnerability. It is possible to exploit this vulnerability by opening a crafted .MP4 file...

CVE-2017-14260

In the SDK in Bento4 1.5.0-616, the AP4StssAtom class in Ap4StssAtom.cpp contains a Write Memory Access Violation vulnerability. It is possible to exploit this vulnerability and possibly execute arbitrary code by opening a crafted .MP4 file...

CVE-2017-14257

Bento4 SDK 1.5.0-616 contains a Read Memory Access Violation in AP4_AtomSampleTable::GetSample (Core/Ap4AtomSampleTable.cpp). Opening a crafted .MP4 file can exploit this vulnerability. The issue is tied to the GetSample function in the AP4AtomSampleTable, and is documented across multiple source...

CVE-2017-14258

The CVE-2017-14258 entry applies to Bento4.0 SDK, specifically Bento4 1.5.0-616, where SetItemCount in Core/Ap4StscAtom.h contains a Write Memory Access Violation vulnerability. An attacker could exploit a crafted .MP4 file to potentially execute arbitrary code. The connected documents corroborat...

CVE-2017-14259

The vulnerability CVE-2017-14259 affects Bento4 1.5.0-616 in the SDK, specifically the AP4_StscAtom.cpp AP4_StscAtom class. The Write Memory Access Violation vulnerability could be triggered by opening a crafted MP4 file, potentially allowing arbitrary code execution. Connected sources consistent...

PT-2017-13330

Name of the Vulnerable Software and Affected Versions Bento4 version 1.5.0-616 Description The issue is related to a Read Memory Access Violation vulnerability in the AP4 StszAtom class, located in the Ap4StszAtom.cpp file. This vulnerability can be exploited by opening a specially crafted .MP4...

PT-2017-13326

Name of the Vulnerable Software and Affected Versions Bento4 version 1.5.0-616 Description The issue is related to a Read Memory Access Violation in the AP4 AtomSampleTable::GetSample function, located in Core/Ap4AtomSampleTable.cpp. This can be exploited by opening a specially crafted .MP4 file...

PT-2017-13327

Name of the Vulnerable Software and Affected Versions Bento4 version 1.5.0-616 Description The issue is related to a Write Memory Access Violation vulnerability in the SetItemCount function within the Core/Ap4StscAtom.h file of the Bento4 SDK. This vulnerability can be exploited by opening a...

CVE-2017-14257: Improper Restriction of Operations within the Bounds of a Memory Buffer

In the SDK in Bento4 1.5.0-616, AP4AtomSampleTable::GetSample in Core/Ap4AtomSampleTable.cpp contains a Read Memory Access Violation vulnerability. It is possible to exploit this vulnerability by opening a crafted .MP4 file...

PT-2017-13328

Name of the Vulnerable Software and Affected Versions Bento4 version 1.5.0-616 Description The issue is related to a Write Memory Access Violation vulnerability in the AP4 StscAtom class. This vulnerability can be exploited by opening a crafted .MP4 file, potentially allowing the execution of...

CVE-2017-14258: Improper Restriction of Operations within the Bounds of a Memory Buffer

In the SDK in Bento4 1.5.0-616, SetItemCount in Core/Ap4StscAtom.h file contains a Write Memory Access Violation vulnerability. It is possible to exploit this vulnerability and possibly execute arbitrary code by opening a crafted .MP4 file...

CVE-2017-14261: Improper Restriction of Operations within the Bounds of a Memory Buffer

In the SDK in Bento4 1.5.0-616, the AP4StszAtom class in Ap4StszAtom.cpp file contains a Read Memory Access Violation vulnerability. It is possible to exploit this vulnerability by opening a crafted .MP4 file...

CVE-2017-14259: Improper Restriction of Operations within the Bounds of a Memory Buffer

In the SDK in Bento4 1.5.0-616, the AP4StscAtom class in Ap4StscAtom.cpp contains a Write Memory Access Violation vulnerability. It is possible to exploit this vulnerability and possibly execute arbitrary code by opening a crafted .MP4 file...

CVE-2017-14260: Improper Restriction of Operations within the Bounds of a Memory Buffer

In the SDK in Bento4 1.5.0-616, the AP4StssAtom class in Ap4StssAtom.cpp contains a Write Memory Access Violation vulnerability. It is possible to exploit this vulnerability and possibly execute arbitrary code by opening a crafted .MP4 file...

PT-2017-13329

Name of the Vulnerable Software and Affected Versions Bento4 version 1.5.0-616 Description The issue is related to a Write Memory Access Violation vulnerability in the AP4 StssAtom class. This vulnerability can be exploited by opening a crafted .MP4 file, potentially allowing the execution of...

Bento4 mp42ts 'AP4_AtomSampleTable::GetSample' function denial of service vulnerability

Bento4 is an open source C++ library for reading and writing MP4 files. mp42ts is one of the tools to convert MP4 files to MPEG2-TS files. A security vulnerability in the Bento4 mp42ts 'AP4AtomSampleTable::GetSample' function allows remote attackers to exploit the vulnerability by submitting a...

Bento4 mp42ts 'AP4_Processor::Process' function denial of service vulnerability

Bento4 is an open source C++ library for reading and writing MP4 files. mp42ts is one of the tools to convert MP4 files to MPEG2-TS files. A security vulnerability in the 'AP4Processor::Process' function in the Bento4 mp42ts Core/Ap4Processor.cpp file allows a remote attacker to exploit the...

Bento4 mp42ts 'AP4_AvccAtom::InspectFields' function denial of service vulnerability

Bento4 is an open source C++ library for reading and writing MP4 files. mp42ts is one of the tools to convert MP4 files to MPEG2-TS files. A security vulnerability in the 'AP4AvccAtom::InspectFields' function in the Bento4 mp42ts Core/Ap4AvccAtom.cpp file allows remote attackers to exploit the...

CVE-2017-12476

The AP4AvccAtom::InspectFields function in Core/Ap4AvccAtom.cpp in Bento4 mp4dump before 1.5.0-616 allows remote attackers to cause a denial of service NULL pointer dereference and application crash via a crafted mp4 file...

Null pointer dereference

The AP4AvccAtom::InspectFields function in Core/Ap4AvccAtom.cpp in Bento4 mp4dump before 1.5.0-616 allows remote attackers to cause a denial of service NULL pointer dereference and application crash via a crafted mp4 file...