CVE-2022-43038

CVE-2022-43038 affects Bento4 v1.6.0-639, where a heap overflow in AP4_BitReader::ReadCache() inside mp42ts is described. Attack surface is limited to Bento4’s MP4 processing code; public descriptions/refs consistently indicate a denial-of-service impact. Some sources (PT-2022-26721) note a tempo...

PT-2022-25607 · Bento4 · Bento4

Name of the Vulnerable Software and Affected Versions: Bento4 version 1.6.0-639 Description: The issue is related to a memory allocation problem that can lead to denial of service. Recommendations: For Bento4 version 1.6.0-639, at the moment, there is no information about a newer version that...

CVE-2022-43034

An issue was discovered in Bento4 v1.6.0-639. There is a heap buffer overflow vulnerability in the AP4BitReader::SkipBitsunsigned int function in mp42ts...

CVE-2022-43034

An issue was discovered in Bento4 v1.6.0-639. There is a heap buffer overflow vulnerability in the AP4BitReader::SkipBitsunsigned int function in mp42ts...

CVE-2022-43033

An issue was discovered in Bento4 1.6.0-639. There is a bad free in the component AP4HdlrAtom::AP4HdlrAtom which allows attackers to cause a Denial of Service DoS via a crafted input...

CVE-2022-43038

Bento4 v1.6.0-639 was discovered to contain a heap overflow via the AP4BitReader::ReadCache function in mp42ts...

PT-2022-26718 · Bento4 · Bento4

Name of the Vulnerable Software and Affected Versions: Bento4 version 1.6.0-639 Description: An issue was discovered in the AP4 BitReader::SkipBitsunsigned int function in mp42ts, which is a heap buffer overflow. Recommendations: For Bento4 version 1.6.0-639, consider disabling the AP4...

CVE-2022-43037

An issue was discovered in Bento4 1.6.0-639. There is a memory leak in the function AP4File::ParseStream in /Core/Ap4File.cpp...

CVE-2022-43035

An issue was discovered in Bento4 v1.6.0-639. There is a heap-buffer-overflow in AP4Dec3Atom::AP4Dec3Atom at Ap4Dec3Atom.cpp, leading to a Denial of Service DoS, as demonstrated by mp42aac...

CVE-2022-40885

Bento4 v1.6.0-639 has a memory allocation issue that can cause denial of service...

PT-2022-25606 · Bento4 · Bento4

Name of the Vulnerable Software and Affected Versions: Bento4 version 1.6.0 Description: The issue is related to memory leaks in Bento4 via the mp4fragment. Recommendations: For Bento4 version 1.6.0, at the moment, there is no information about a newer version that contains a fix for this...

PT-2022-26721 · Bento4 · Bento4

Name of the Vulnerable Software and Affected Versions: Bento4 version 1.6.0-639 Description: A heap overflow issue was discovered in Bento4 via the AP4 BitReader::ReadCache function in mp42ts. Recommendations: For Bento4 version 1.6.0-639, as a temporary workaround, consider disabling the AP4...

CVE-2022-43032

CVE-2022-43032 affects Bento4 v1.6.0-639. The issue is a memory leak in AP4_DescriptorFactory::CreateDescriptorFromStream (Core/Ap4DescriptorFactory.cpp) that can lead to denial of service. Exploitation details or in‑the‑wild status are not provided in the supplied documents. No patch/version fix...

CVE-2022-43038

Bento4 v1.6.0-639 was discovered to contain a heap overflow via the AP4BitReader::ReadCache function in mp42ts...

CVE-2022-43033

An issue was discovered in Bento4 1.6.0-639. There is a bad free in the component AP4HdlrAtom::AP4HdlrAtom which allows attackers to cause a Denial of Service DoS via a crafted input...

Bento4 缓冲区错误漏洞

Bento4 is an open source C library for reading and writing MP4 files. version v1.6.0-639 of Bento4 suffers from a denial of service vulnerability, which stems from a boundary error in AP4Dec3Atom::AP4Dec3Atom in Ap4Dec3Atom.cpp when handling untrusted input. An attacker could exploit the...

PT-2022-26720 · Bento4 · Bento4

Name of the Vulnerable Software and Affected Versions: Bento4 version 1.6.0-639 Description: An issue was discovered in the function AP4 File::ParseStream in /Core/Ap4File.cpp, which results in a memory leak. Recommendations: For Bento4 version 1.6.0-639, consider disabling the AP4...

CVE-2022-40884

CVE-2022-40884 affects Bento4 1.6.0, where memory leaks via the mp4fragment component are reported. The NVD entry assigns CVSS v3.1 base score 5.5 (Medium) with LOCAL attack vector, requiring user interaction and no privileges, and indicates availability impact HIGH. Public references in connecte...

Bento4 安全漏洞

Bento4 is an open source C++ library for reading and writing MP4 files. A security vulnerability exists in Bento4 version 1.6.0, which stems from a memory leak discovered via mp4 clips...

CVE-2022-43037

Bento4 1.6.0-639 is affected by a memory leak in the parser path: AP4_File::ParseStream (file Core/Ap4File.cpp). The CVE notes a memory leak in this function, indicating potential resource exhaustion for affected deployments. The connected sources consistently reference Bento4 as the vulnerable c...