CVE-2024-30809

An issue was discovered in Bento4 v1.6.0-641-2-g1529b83. There is a heap-use-after-free in Ap4Sample.h in AP4Sample::GetOffset const, leading to a Denial of Service DoS, as demonstrated by mp42ts...

CVE-2024-31004

An issue in Bento4 Bento v.1.6.0-641 allows a remote attacker to execute arbitrary code via the Ap4StsdAtom.cpp,AP4StsdAtom::AP4StsdAtom,mp4fragment...

CVE-2024-31004

An issue in Bento4 Bento v.1.6.0-641 allows a remote attacker to execute arbitrary code via the Ap4StsdAtom.cpp,AP4StsdAtom::AP4StsdAtom,mp4fragment...

CVE-2024-30806

An issue was discovered in Bento4 v1.6.0-641-2-g1529b83. There is a heap overflow in AP4Dec3Atom::AP4Dec3Atom at Ap4Dec3Atom.cpp, leading to a Denial of Service DoS, as demonstrated by mp42aac...

PT-2024-23623 · Bento4 · Bento4

Name of the Vulnerable Software and Affected Versions: Bento4 version 1.6.0-641-2-g1529b83 Description: An issue was discovered in Bento4, leading to a Denial of Service DoS. The issue is a heap-use-after-free in Ap4Sample.h in the AP4 Sample::GetOffset function, as demonstrated by mp42ts...

PT-2024-23718 · Bento4 · Bento4

Name of the Vulnerable Software and Affected Versions: Bento4 Bento version 1.6.0-641 Description: An issue in Bento4 Bento allows a remote attacker to execute arbitrary code via the Ap4MdhdAtom.cpp, AP4 MdhdAtom::AP4 MdhdAtom, mp4fragment. Recommendations: For Bento4 Bento version 1.6.0-641,...

CVE-2024-30808

An issue was discovered in Bento4 v1.6.0-641-2-g1529b83. There is a heap-use-after-free in AP4SubStream::AP4SubStream at Ap4ByteStream.cpp, leading to a Denial of Service DoS, as demonstrated by mp42ts...

CVE-2024-31005

An issue in Bento4 Bento v.1.6.0-641 allows a remote attacker to execute arbitrary code via the Ap4MdhdAtom.cpp,AP4MdhdAtom::AP4MdhdAtom,mp4fragment...

Bento4 安全漏洞

Bento4 is an open source C++ library for reading and writing MP4 files. A buffer overflow vulnerability exists in the Bento4 Ap4Utils.cpp file, which stems from the AP4BitReader::ReadCache method of the Ap4Utils.cpp file failing to correctly validate the length and size of the input data, which c...

Bento4 安全漏洞

Bento4 is an open source C++ library for reading and writing MP4 files. A security vulnerability exists in the Bento4 v1.6.0-641-2-g1529b83 release that stems from a denial of service issue in the AP4Sample::GetOffset method of the Ap4Sample.h file...

CVE-2024-31002

Buffer Overflow vulnerability in Bento4 Bento v.1.6.0-641 allows a remote attacker to execute arbitrary code via the AP4 BitReader::ReadCache at Ap4Utils.cpp component...

CVE-2024-31002

Buffer Overflow vulnerability in Bento4 Bento v.1.6.0-641 allows a remote attacker to execute arbitrary code via the AP4 BitReader::ReadCache at Ap4Utils.cpp component...

CVE-2024-30807

An issue was discovered in Bento4 v1.6.0-641-2-g1529b83. There is a heap-use-after-free in AP4UnknownAtom::AP4UnknownAtom at Ap4Atom.cpp, leading to a Denial of Service DoS, as demonstrated by mp42ts...

CVE-2024-30807

An issue was discovered in Bento4 v1.6.0-641-2-g1529b83. There is a heap-use-after-free in AP4UnknownAtom::AP4UnknownAtom at Ap4Atom.cpp, leading to a Denial of Service DoS, as demonstrated by mp42ts...

Bento4 安全漏洞

Bento4 is an open source C++ library for reading and writing MP4 files. A security vulnerability exists in Bento4 version v.1.6.0-641. A remote attacker can exploit this vulnerability to execute arbitrary code via Ap4MdhdAtom.cpp,AP4MdhdAtom::AP4MdhdAtom,mp4fragment...

PT-2024-23716 · Bento4 · Bento4

Name of the Vulnerable Software and Affected Versions: Bento4 Bento version 1.6.0-641 Description: The issue allows a remote attacker to execute arbitrary code via the AP4 MemoryByteStream::WritePartial function at Ap4ByteStream.cpp. This is a Buffer Overflow vulnerability. Recommendations: For...

CVE-2024-31005

CVE-2024-31005 affects Bento4 (Bento version 1.6.0-641). The issue resides in Ap4MdhdAtom.cpp, specifically AP4_MdhdAtom::AP4_MdhdAtom, triggered via mp4fragment, enabling a remote attacker to execute arbitrary code. The connected documents consistently describe this vulnerability in Bento4 1.6.0...

CVE-2024-31005

An issue in Bento4 Bento v.1.6.0-641 allows a remote attacker to execute arbitrary code via the Ap4MdhdAtom.cpp,AP4MdhdAtom::AP4MdhdAtom,mp4fragment...

CVE-2024-31005

An issue in Bento4 Bento v.1.6.0-641 allows a remote attacker to execute arbitrary code via the Ap4MdhdAtom.cpp,AP4MdhdAtom::AP4MdhdAtom,mp4fragment...

CVE-2024-30809

Bento4 v1.6.0-641-2-g1529b83 has a heap-use-after-free in AP4_Sample::GetOffset() (Ap4Sample.h), causing Denial of Service. Exploitation is demonstrated by mp42ts; CVE-2024-30809 has CVSSv3.1 base score 7.5 (NETWORK access, no authentication, high impact on availability). Multiple feeds confirm t...