1905 matches found
PT-2024-23715 · Bento4 · Bento4
Name of the Vulnerable Software and Affected Versions: Bento4 Bento version 1.6.0-641 Description: The issue allows a remote attacker to execute arbitrary code via the AP4 BitReader::ReadCache function at Ap4Utils.cpp component. This is a Buffer Overflow vulnerability. Recommendations: For Bento4...
CVE-2024-31005
An issue in Bento4 Bento v.1.6.0-641 allows a remote attacker to execute arbitrary code via the Ap4MdhdAtom.cpp,AP4MdhdAtom::AP4MdhdAtom,mp4fragment...
Bento4 安全漏洞
Bento4 is an open source C++ library for reading and writing MP4 files. A buffer overflow vulnerability exists in the Bento4 Ap4Utils.cpp file, which stems from the AP4BitReader::ReadCache method of the Ap4Utils.cpp file failing to correctly validate the length and size of the input data, which c...
CVE-2024-31005
CVE-2024-31005 affects Bento4 (Bento version 1.6.0-641). The issue resides in Ap4MdhdAtom.cpp, specifically AP4_MdhdAtom::AP4_MdhdAtom, triggered via mp4fragment, enabling a remote attacker to execute arbitrary code. The connected documents consistently describe this vulnerability in Bento4 1.6.0...
Bento4 安全漏洞
Bento4 is an open source C++ library for reading and writing MP4 files. A security vulnerability exists in the Bento4 v1.6.0-641-2-g1529b83 release that stems from a denial of service issue in the AP4Sample::GetOffset method of the Ap4Sample.h file...
PT-2024-23621 · Bento4 · Bento4
Name of the Vulnerable Software and Affected Versions: Bento4 version 1.6.0-641-2-g1529b83 Description: An issue was discovered in Bento4, leading to a Denial of Service DoS. The issue is a heap-use-after-free in AP4 UnknownAtom::AP4 UnknownAtom at Ap4Atom.cpp, as demonstrated by mp42ts...
CVE-2024-31004
CVE-2024-31004 affects Bento4 Bento v.1.6.0-641. The vulnerability is in the Ap4StsdAtom.cpp file, specifically the AP4_StsdAtom::AP4_StsdAtom constructor, which can be triggered via mp4fragment. The issue enables a remote attacker to execute arbitrary code. The connected sources confirm the affe...
CVE-2024-31005
An issue in Bento4 Bento v.1.6.0-641 allows a remote attacker to execute arbitrary code via the Ap4MdhdAtom.cpp,AP4MdhdAtom::AP4MdhdAtom,mp4fragment...
CVE-2024-30809
An issue was discovered in Bento4 v1.6.0-641-2-g1529b83. There is a heap-use-after-free in Ap4Sample.h in AP4Sample::GetOffset const, leading to a Denial of Service DoS, as demonstrated by mp42ts...
PT-2024-23718 · Bento4 · Bento4
Name of the Vulnerable Software and Affected Versions: Bento4 Bento version 1.6.0-641 Description: An issue in Bento4 Bento allows a remote attacker to execute arbitrary code via the Ap4MdhdAtom.cpp, AP4 MdhdAtom::AP4 MdhdAtom, mp4fragment. Recommendations: For Bento4 Bento version 1.6.0-641,...
CVE-2024-31002
Buffer Overflow vulnerability in Bento4 Bento v.1.6.0-641 allows a remote attacker to execute arbitrary code via the AP4 BitReader::ReadCache at Ap4Utils.cpp component...
CVE-2024-30809
An issue was discovered in Bento4 v1.6.0-641-2-g1529b83. There is a heap-use-after-free in Ap4Sample.h in AP4Sample::GetOffset const, leading to a Denial of Service DoS, as demonstrated by mp42ts...
Bento4 安全漏洞
Bento4 is an open source C++ library for reading and writing MP4 files. A code execution vulnerability exists in the Bento4 Ap4StsdAtom.cpp file, which stems from the failure of the AP4StsdAtom::AP4StsdAtom method of the Ap4StsdAtom.cpp file to correctly filter the special elements of the...
CVE-2024-30807
An issue was discovered in Bento4 v1.6.0-641-2-g1529b83. There is a heap-use-after-free in AP4UnknownAtom::AP4UnknownAtom at Ap4Atom.cpp, leading to a Denial of Service DoS, as demonstrated by mp42ts...
CVE-2024-30806
CVE-2024-30806 affects Bento4 v1.6.0-641-2-g1529b83. The issue is a heap overflow in AP4_Dec3Atom::AP4_Dec3Atom (Ap4Dec3Atom.cpp) that leads to a Denial of Service (DoS). Demonstrated by mp42aac. Connected advisories corroborate the same description. The Red Hat entry mirrors the DoS without prov...
PT-2024-23623 · Bento4 · Bento4
Name of the Vulnerable Software and Affected Versions: Bento4 version 1.6.0-641-2-g1529b83 Description: An issue was discovered in Bento4, leading to a Denial of Service DoS. The issue is a heap-use-after-free in Ap4Sample.h in the AP4 Sample::GetOffset function, as demonstrated by mp42ts...
CVE-2024-30809
Bento4 v1.6.0-641-2-g1529b83 has a heap-use-after-free in AP4_Sample::GetOffset() (Ap4Sample.h), causing Denial of Service. Exploitation is demonstrated by mp42ts; CVE-2024-30809 has CVSSv3.1 base score 7.5 (NETWORK access, no authentication, high impact on availability). Multiple feeds confirm t...
CVE-2024-30807
CVE-2024-30807 affects Bento4 v1.6.0-641-2-g1529b83. It describes a heap-use-after-free in AP4_UnknownAtom::~AP4_UnknownAtom (Ap4Atom.cpp) that leads to a Denial of Service, as demonstrated by mp42ts. Multiple sources (NVD, Red Hat, CNNVD, OSV, CVE listing, CVELIST, PT Security) confirm the issue...
Bento4 安全漏洞
Bento4 is an open source C++ library for reading and writing MP4 files. A security vulnerability exists in Bento4 version v.1.6.0-641, which stems from a buffer overflow in the AP4MemoryByteStream::WritePartial method of the Ap4ByteStream.cpp file that could lead to remote code execution...