PT-2024-20953 · Bento4 · Bento4

Name of the Vulnerable Software and Affected Versions: Bento4 version 1.6.0-640 Description: The issue is related to an out-of-memory bug in the AP4 DataBuffer::ReallocateBuffer function. Recommendations: For Bento4 version 1.6.0-640, consider restricting the use of the AP4...

CVE-2024-25452

Bento4 v1.6.0-640 was discovered to contain an out-of-memory bug via the AP4UrlAtom::AP4UrlAtom function...

Bento4 Resource Management Error Vulnerability

Bento4 is an open source C++ library for reading and writing MP4 files. A resource management error vulnerability exists in Bento4 v1.6.0-640, which stems from an out-of-memory error in function AP4DataBuffer::ReallocateBuffer...

CVE-2024-25454

Bento4 v1.6.0-640 was discovered to contain a NULL pointer dereference via the AP4DescriptorFinder::Test function...

Bento4 Code Issue Vulnerability

Bento4 is an open source C++ library for reading and writing MP4 files. A code issue vulnerability exists in Bento4 v1.6.0-640, which stems from a null pointer dereference vulnerability in function AP4StszAtom::GetSampleSize...

PT-2024-20954 · Bento4 · Bento4

Name of the Vulnerable Software and Affected Versions: Bento4 version 1.6.0-640 Description: The issue is an out-of-memory bug that occurs via the AP4 UrlAtom::AP4 UrlAtom function. Recommendations: For Bento4 version 1.6.0-640, consider disabling the AP4 UrlAtom::AP4 UrlAtom function as a...

Bento4 Resource Management Error Vulnerability

Bento4 is an open source C++ library for reading and writing MP4 files. A resource management error vulnerability exists in Bento4 v1.6.0-640, which stems from an out-of-memory error in the function AP4UrlAtom::AP4UrlAtom...

Bento4 Code Issue Vulnerability

Bento4 is an open source C++ library for reading and writing MP4 files. A code issue vulnerability exists in Bento4 v1.6.0-640, which stems from a null pointer dereference vulnerability in function AP4DescriptorFinder::Test...

CVE-2024-25451

CVE-2024-25451 concerns Bento4 v1.6.0-640, which contains an out-of-memory bug in the AP4_DataBuffer::ReallocateBuffer() function. Multiple sources confirm the issue and tie it to Bento4’s MP4 reading/writing library, with the vulnerability enabling an OOM condition that can impact system availab...

CVE-2024-25453

Bento4 v1.6.0-640 was discovered to contain a NULL pointer dereference via the AP4StszAtom::GetSampleSize function...

CVE-2024-25454

Bento4 v1.6.0-640 contains a NULL pointer dereference in AP4_DescriptorFinder::Test(). The CVE entry documents this as the root cause, with a high availability impact (AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H). The official sources in the provided documents consistently reference Bento4 1.6.0-640 and ...

PT-2024-20955 · Bento4 · Bento4

Name of the Vulnerable Software and Affected Versions: Bento4 version 1.6.0-640 Description: A NULL pointer dereference was discovered via the AP4 DescriptorFinder::Test function. Recommendations: For Bento4 version 1.6.0-640, as a temporary workaround, consider disabling the AP4...

CVE-2024-25452

CVE-2024-25452 affects Bento4 v1.6.0-640, with an out-of-memory bug in AP4_UrlAtom::AP4_UrlAtom(). Public document set confirms the vulnerable component and impact (OOM; Availability), but exploitation details are not provided. Red Hat notes the issue; PT-2024-20954 suggests disabling AP4 UrlAtom...

CVE-2024-25453

CVE-2024-25453 affects Bento4 v1.6.0-640. It exposes a NULL pointer dereference in AP4_StszAtom::GetSampleSize(), with CVSS 3.1 base score 5.5 (Medium) and a high impact on availability, local attack vector, no privileges required, user interaction required. The connected sources confirm the vuln...

CVE-2024-25452

Bento4 v1.6.0-640 was discovered to contain an out-of-memory bug via the AP4UrlAtom::AP4UrlAtom function...

Bento4 Denial of Service Vulnerability (CNVD-2023-66174)

Bento4 is an open source C++ library for reading and writing MP4 files. A denial-of-service vulnerability exists in Bento4, which stems from the AP4Processor::ProcessFragments function in mp4crypt containing a segmentation violation that can be exploited by an attacker to cause a denial-of-servic...

CVE-2023-38666

Bento4 v1.6.0-639 was discovered to contain a segmentation violation via the AP4Processor::ProcessFragments function in mp4encrypt...

CVE-2023-38666

Bento4 v1.6.0-639 was discovered to contain a segmentation violation via the AP4Processor::ProcessFragments function in mp4encrypt...

Code injection

Bento4 v1.6.0-639 was discovered to contain a segmentation violation via the AP4Processor::ProcessFragments function in mp4encrypt...

CVE-2023-38666

Bento4 v1.6.0-639 was discovered to contain a segmentation violation via the AP4Processor::ProcessFragments function in mp4encrypt...