CVE-2025-25942

CVE-2025-25942 affects Bento4 v1.6.0-641. The issue occurs in mp4fragment when processing invalid files and stems from memory allocated in SampleArray::SampleArray in Mp4Fragment.cpp not being properly released, enabling potential information disclosure of sensitive data. The CVSS vector indicate...

PT-2025-7583 · Bento4 · Bento4

Name of the Vulnerable Software and Affected Versions: Bento4 version 1.6.0-641 Description: A buffer overflow issue in Bento4 allows a local attacker to execute arbitrary code via the AP4 Stz2Atom::AP4 Stz2Atom component located in Ap4Stz2Atom.cpp. This enables local arbitrary code execution...

The vulnerability of the AP4_StdcFileByteStream::ReadPartial() function in the ISO-MP4 Bento4 file reading and writing library allows a attacker to compromise the confidentiality, integrity, and accessibility of the protected information.

The vulnerability of the AP4StdcFileByteStream::ReadPartial function in the ISO-MP4 Bento4 file reading and writing library is related to the occurrence of operations outside the buffer in memory. Exploiting this vulnerability could allow an attacker to compromise the confidentiality, integrity,...

CVE-2024-57598

A floating point exception divide-by-zero vulnerability was discovered in Bento4 1.6.0-641 in function AP4TfraAtom of Ap4TfraAtom.cpp which allows a remote attacker to cause a denial of service vulnerability...

CVE-2022-3662

A vulnerability was found in Axiomatic Bento4. It has been declared as critical. This vulnerability affects the function GetOffset of the file Ap4Sample.h of the component mp42hls. The manipulation leads to use after free. The attack can be initiated remotely. The exploit has been disclosed to th...

CVE-2022-3666

A vulnerability, which was classified as critical, has been found in Axiomatic Bento4. Affected by this issue is the function AP4LinearReader::Advance of the file Ap4LinearReader.cpp of the component mp42ts. The manipulation leads to use after free. The attack may be launched remotely. The exploi...

CVE-2022-3664

A vulnerability classified as critical has been found in Axiomatic Bento4. Affected is the function AP4BitStream::WriteBytes of the file Ap4BitStream.cpp of the component avcinfo. The manipulation leads to heap-based buffer overflow. It is possible to launch the attack remotely. The exploit has...

CVE-2022-3670

A vulnerability was found in Axiomatic Bento4. It has been classified as critical. Affected is the function WriteSample of the component mp42hevc. The manipulation leads to heap-based buffer overflow. It is possible to launch the attack remotely. The exploit has been disclosed to the public and m...

CVE-2022-3665

A vulnerability classified as critical was found in Axiomatic Bento4. Affected by this vulnerability is an unknown functionality of the file AvcInfo.cpp of the component avcinfo. The manipulation leads to heap-based buffer overflow. The attack can be launched remotely. The exploit has been...

CVE-2022-3667

A vulnerability, which was classified as critical, was found in Axiomatic Bento4. This affects the function AP4MemoryByteStream::WritePartial of the file Ap4ByteStream.cpp of the component mp42aac. The manipulation leads to heap-based buffer overflow. It is possible to initiate the attack remotel...

CVE-2024-57598

A floating point exception divide-by-zero vulnerability was discovered in Bento4 1.6.0-641 in function AP4TfraAtom of Ap4TfraAtom.cpp which allows a remote attacker to cause a denial of service vulnerability...

CVE-2024-57598

A floating point exception divide-by-zero vulnerability was discovered in Bento4 1.6.0-641 in function AP4TfraAtom of Ap4TfraAtom.cpp which allows a remote attacker to cause a denial of service vulnerability...

CVE-2024-57598

A floating point exception divide-by-zero vulnerability was discovered in Bento4 1.6.0-641 in function AP4TfraAtom of Ap4TfraAtom.cpp which allows a remote attacker to cause a denial of service vulnerability...

Bento4 安全漏洞

Bento4 is an open source C++ library for reading and writing MP4 files from Axiomatic Systems. A security vulnerability exists in Bento4 version 1.6.0-641, which stems from a floating-point exception vulnerability in the AP4TfraAtom function of Ap4TfraAtom.cpp, which allows remote attackers to...

CVE-2024-57598

CVE-2024-57598 affects Bento4 1.6.0-641. The vulnerability is a floating point exception (divide-by-zero) in AP4_TfraAtom() of Ap4TfraAtom.cpp that allows a remote attacker to cause a denial of service. Documents confirm the affected component and root cause; no public patches are detailed in the...

PT-2025-5775

Name of the Vulnerable Software and Affected Versions: Bento4 version 1.6.0-641 Description: A floating point exception vulnerability, specifically a divide-by-zero error, was discovered in the AP4 TfraAtom function of Ap4TfraAtom.cpp. This issue allows a remote attacker to cause a denial of...

CVE-2024-57598

A floating point exception divide-by-zero vulnerability was discovered in Bento4 1.6.0-641 in function AP4TfraAtom of Ap4TfraAtom.cpp which allows a remote attacker to cause a denial of service vulnerability...

CVE-2025-0870

A vulnerability was found in Axiomatic Bento4 up to 1.6.0-641. It has been rated as critical. Affected by this issue is the function AP4DataBuffer::GetData in the library Ap4DataBuffer.h. The manipulation leads to heap-based buffer overflow. The attack may be launched remotely. The complexity of ...

CVE-2025-0870

CVE-2025-0870 affects Axiomatic Bento4 versions up to 1.6.0-641. The vulnerable component is AP4_DataBuffer::GetData in Ap4DataBuffer.h, whose manipulation causes a heap-based buffer overflow. The issue can be exploited remotely with high attack complexity; exploitation has been disclosed publicl...

CVE-2025-0870 Axiomatic Bento4 Ap4DataBuffer.h GetData heap-based overflow

A vulnerability was found in Axiomatic Bento4 up to 1.6.0-641. It has been rated as critical. Affected by this issue is the function AP4DataBuffer::GetData in the library Ap4DataBuffer.h. The manipulation leads to heap-based buffer overflow. The attack may be launched remotely. The complexity of ...