1902 matches found
CVE-2022-3668
A vulnerability has been found in Axiomatic Bento4 and classified as problematic. This vulnerability affects the function AP4AtomFactory::CreateAtomFromStream of the component mp4edit. The manipulation leads to memory leak. The attack can be initiated remotely. The exploit has been disclosed to t...
CVE-2022-3813
A vulnerability classified as problematic has been found in Axiomatic Bento4. This affects an unknown part of the component mp4edit. The manipulation leads to memory leak. It is possible to initiate the attack remotely. The exploit has been disclosed to the public and may be used. The associated...
CVE-2022-3809
A vulnerability was found in Axiomatic Bento4 and classified as problematic. Affected by this issue is the function ParseCommandLine of the file Mp4Tag/Mp4Tag.cpp of the component mp4tag. The manipulation leads to denial of service. The attack may be launched remotely. The exploit has been...
CVE-2022-3816
A vulnerability, which was classified as problematic, was found in Axiomatic Bento4. Affected is an unknown function of the component mp4decrypt. The manipulation leads to memory leak. It is possible to launch the attack remotely. The exploit has been disclosed to the public and may be used...
CVE-2021-35307
An issue was discovered in Bento4 through v1.6.0-636. A NULL pointer dereference exists in the AP4DescriptorFinder::Test component located in /Core/Ap4Descriptor.h. It allows an attacker to cause a denial of service DOS...
CVE-2021-40941
In Bento4 1.6.0-638, there is an allocator is out of memory in the function AP4Array::EnsureCapacity in Ap4Array.h:172, as demonstrated by GPAC. This can cause a denial of service DOS...
CVE-2021-35306
An issue was discovered in Bento4 through v1.6.0-636. A NULL pointer dereference exists in the function AP4StszAtom::WriteFields located in Ap4StszAtom.cpp. It allows an attacker to cause a denial of service DOS...
CVE-2021-32265
An issue was discovered in Bento4 through v1.6.0-637. A global-buffer-overflow exists in the function AP4MemoryByteStream::WritePartial located in Ap4ByteStream.cpp. It allows an attacker to cause code execution or information disclosure...
CVE-2020-23331
An issue was discovered in Bento4 version 06c39d9. A NULL pointer dereference exists in the AP4DescriptorListWriter::Action component located in /Core/Ap4Descriptor.h. It allows an attacker to cause a denial of service DOS...
CVE-2020-23333
A heap-based buffer overflow exists in the AP4CttsAtom::AP4CttsAtom component located in /Core/Ap4Utils.h of Bento4 version 06c39d9. This can lead to a denial of service DOS...
CVE-2020-23330
An issue was discovered in Bento4 version 06c39d9. A NULL pointer dereference exists in the AP4Stz2Atom::GetSampleSize component located in /Core/Ap4Stz2Atom.cpp. It allows an attacker to cause a denial of service DOS...
CVE-2020-23912
An issue was discovered in Bento4 through v1.6.0-637. A NULL pointer dereference exists in the function AP4StszAtom::GetSampleSize located in Ap4StszAtom.cpp. It allows an attacker to cause Denial of Service...
CVE-2020-23334
A WRITE memory access in the AP4NullTerminatedStringAtom::AP4NullTerminatedStringAtom component of Bento4 version 06c39d9 can lead to a segmentation fault...
CVE-2020-21066
An issue was discovered in Bento4 v1.5.1.0. There is a heap-buffer-overflow in AP4Dec3Atom::AP4Dec3Atom at Ap4Dec3Atom.cpp, leading to a denial of service program crash, as demonstrated by mp42aac...
CVE-2018-20095
An issue was discovered in EnsureCapacity in Core/Ap4Array.h in Bento4 1.5.1-627. Crafted MP4 input triggers an attempt at excessive memory allocation, as demonstrated by mp42hls...
CVE-2019-17453
Bento4 1.5.1.0 has a NULL pointer dereference in AP4DescriptorListWriter::Action in Core/Ap4Descriptor.h, related to AP4IodsAtom::WriteFields in Core/Ap4IodsAtom.cpp, as demonstrated by mp4encrypt or mp4compact...
CVE-2018-5253
The AP4FtypAtom class in Core/Ap4FtypAtom.cpp in Bento4 1.5.1.0 has an Infinite loop via a crafted MP4 file that triggers size mishandling...
CVE-2019-20090
An issue was discovered in Bento4 1.5.1.0. There is a use-after-free in AP4Sample::GetOffset in Core/Ap4Sample.h when called from Ap4LinearReader.cpp...
CVE-2019-17452
Bento4 1.5.1.0 has a NULL pointer dereference in AP4DescriptorListInspector::Action in Core/Ap4Descriptor.h, related to AP4IodsAtom::InspectFields in Core/Ap4IodsAtom.cpp, as demonstrated by mp4dump...