CVE-2024-31005

An issue in Bento4 Bento v.1.6.0-641 allows a remote attacker to execute arbitrary code via the Ap4MdhdAtom.cpp,AP4MdhdAtom::AP4MdhdAtom,mp4fragment...

CVE-2024-30809

Bento4 v1.6.0-641-2-g1529b83 has a heap-use-after-free in AP4_Sample::GetOffset() (Ap4Sample.h), causing Denial of Service. Exploitation is demonstrated by mp42ts; CVE-2024-30809 has CVSSv3.1 base score 7.5 (NETWORK access, no authentication, high impact on availability). Multiple feeds confirm t...

CVE-2024-30808

An issue was discovered in Bento4 v1.6.0-641-2-g1529b83. There is a heap-use-after-free in AP4SubStream::AP4SubStream at Ap4ByteStream.cpp, leading to a Denial of Service DoS, as demonstrated by mp42ts...

CVE-2024-30809

An issue was discovered in Bento4 v1.6.0-641-2-g1529b83. There is a heap-use-after-free in Ap4Sample.h in AP4Sample::GetOffset const, leading to a Denial of Service DoS, as demonstrated by mp42ts...

CVE-2024-31003

Buffer Overflow vulnerability in Bento4 Bento v.1.6.0-641 allows a remote attacker to execute arbitrary code via the AP4MemoryByteStream::WritePartial at Ap4ByteStream.cpp...

Bento4 安全漏洞

Bento4 is an open source C++ library for reading and writing MP4 files. A security vulnerability exists in the Bento4 v1.6.0-641-2-g1529b83 version that originates from a denial of service issue in the AP4SubStream::AP4SubStream method of the Ap4ByteStream.cpp file...

CVE-2024-30808

An issue was discovered in Bento4 v1.6.0-641-2-g1529b83. There is a heap-use-after-free in AP4SubStream::AP4SubStream at Ap4ByteStream.cpp, leading to a Denial of Service DoS, as demonstrated by mp42ts...

CVE-2024-31003

Buffer Overflow vulnerability in Bento4 Bento v.1.6.0-641 allows a remote attacker to execute arbitrary code via the AP4MemoryByteStream::WritePartial at Ap4ByteStream.cpp...

CVE-2024-31003

Buffer Overflow vulnerability in Bento4 Bento v.1.6.0-641 allows a remote attacker to execute arbitrary code via the AP4MemoryByteStream::WritePartial at Ap4ByteStream.cpp...

CVE-2024-30806

An issue was discovered in Bento4 v1.6.0-641-2-g1529b83. There is a heap overflow in AP4Dec3Atom::AP4Dec3Atom at Ap4Dec3Atom.cpp, leading to a Denial of Service DoS, as demonstrated by mp42aac...

CVE-2024-30807

CVE-2024-30807 affects Bento4 v1.6.0-641-2-g1529b83. It describes a heap-use-after-free in AP4_UnknownAtom::~AP4_UnknownAtom (Ap4Atom.cpp) that leads to a Denial of Service, as demonstrated by mp42ts. Multiple sources (NVD, Red Hat, CNNVD, OSV, CVE listing, CVELIST, PT Security) confirm the issue...

Bento4 安全漏洞

Bento4 is an open source C++ library for reading and writing MP4 files. A security vulnerability exists in the Bento4 v1.6.0-641-2-g1529b83 release that stems from a denial of service issue in the AP4Dec3Atom::AP4Dec3Atom method of the Ap4Dec3Atom.cpp file...

PT-2024-23622 · Bento4 · Bento4

Name of the Vulnerable Software and Affected Versions: Bento4 version 1.6.0-641-2-g1529b83 Description: An issue was discovered in Bento4, leading to a Denial of Service DoS. The issue is a heap-use-after-free in AP4 SubStream::AP4 SubStream at Ap4ByteStream.cpp, as demonstrated by mp42ts...

PT-2024-23620 · Bento4 · Bento4

Name of the Vulnerable Software and Affected Versions: Bento4 version 1.6.0-641-2-g1529b83 Description: An issue was discovered in Bento4, leading to a Denial of Service DoS. The issue is caused by a heap overflow in AP4 Dec3Atom::AP4 Dec3Atom at Ap4Dec3Atom.cpp. This can be demonstrated by...

CVE-2024-30808

CVE-2024-30808 affects Bento4 v1.6.0-641-2-g1529b83, where a heap-use-after-free in AP4_SubStream::~AP4_SubStream (Ap4ByteStream.cpp) leads to a Denial of Service. The issue is demonstrated by mp42ts. Affected component: Bento4 library; root cause: heap-use-after-free in AP4_SubStream destructor....

CVE-2024-30807

An issue was discovered in Bento4 v1.6.0-641-2-g1529b83. There is a heap-use-after-free in AP4UnknownAtom::AP4UnknownAtom at Ap4Atom.cpp, leading to a Denial of Service DoS, as demonstrated by mp42ts...

Bento4 Memory Disclosure Vulnerability

Bento4 is an open source C++ library for reading and writing MP4 files. Bento4 suffers from a memory leak vulnerability that originates from AP4Movie::AP4Movie not freeing or failing to free dynamically allocated heap memory, which can be exploited by an attacker to cause a denial of service...

CVE-2024-24155

Bento4 v1.5.1-628 contains a Memory leak on AP4Movie::AP4Movie, parsing tracks and added into mTracks list, but mp42aac cannot correctly delete when we got an no audio track found error. This vulnerability allows attackers to cause a Denial of Service DoS via a crafted mp4 file...

Memory corruption

Bento4 v1.5.1-628 contains a Memory leak on AP4Movie::AP4Movie, parsing tracks and added into mTracks list, but mp42aac cannot correctly delete when we got an no audio track found error. This vulnerability allows attackers to cause a Denial of Service DoS via a crafted mp4 file...

Bento4 安全漏洞

Bento4 is an open source C++ library for reading and writing MP4 files. Bento4 suffers from a memory leak vulnerability that originates from AP4Movie::AP4Movie not freeing or failing to free dynamically allocated heap memory, which can be exploited by an attacker to cause a denial of service...