138 matches found
EUVD-2020-11619
Malware in sbrugna...
EUVD-2020-11615
Malware in sbrugna...
EUVD-2020-11618
Malware in sbrugna...
EUVD-2020-11616
Malware in sbrugna...
EUVD-2020-11620
Malware in sbrugna...
Linux Distros Unpatched Vulnerability : CVE-2018-5253
The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - The AP4FtypAtom class in Core/Ap4FtypAtom.cpp in Bento4 1.5.1.0 has an Infinite loop via a crafted MP4 file that triggers size mishandling. CVE-2018-5253 Note...
Linux Distros Unpatched Vulnerability : CVE-2022-41425
The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - Bento4 v1.6.0-639 was discovered to contain a segmentation violation via the AP4Processor::ProcessFragments function in mp4decrypt. CVE-2022-41425 Note that...
Linux Distros Unpatched Vulnerability : CVE-2022-31285
The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - An issue was discovered in Bento4 1.2. The allocator is out of memory in /Source/C++/Core/Ap4Array.h. CVE-2022-31285 Note that Nessus relies on the presence of...
Linux Distros Unpatched Vulnerability : CVE-2018-20407
The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - An issue was discovered in Bento4 1.5.1-627. There is a memory leak in AP4DescriptorFactory::CreateDescriptorFromStream in Core/Ap4DescriptorFactory.cpp, as...
CVE-2025-54410 vulnerabilities
Vulnerabilities for packages: k3s, newrelic-infrastructure-agent, prometheus, rancher-machine, kpt, openbao, bento, harbor-scanner-trivy, portieris, cluster-api-helm-controller, opentelemetry-operator, bom, helm-mapkubeapis, k3d, docker-credential-gcr, xeol, amazon-cloudwatch-agent-operator,...
GHSA-4VQ8-7JFC-9CVP vulnerabilities
Vulnerabilities for packages: cluster-api-helm-controller, neuvector-scanner-fips, rancher, portieris-fips, skaffold-fips, docker-credential-gcr-fips, traefik, harvester-fips, xeol-fips, newrelic-infrastructure-agent, bom, bento, falcoctl, k3d, vault, falcoctl-fips, ctop, k3s, aactl, promxy-fips,...
CVE-2025-54410 vulnerabilities
Vulnerabilities for packages: cluster-api-helm-controller, neuvector-scanner-fips, rancher, portieris-fips, skaffold-fips, docker-credential-gcr-fips, traefik, harvester-fips, xeol-fips, newrelic-infrastructure-agent, bom, bento, falcoctl, k3d, vault, falcoctl-fips, ctop, k3s, aactl, promxy-fips,...
CVE-2022-40885
Bento4 v1.6.0-639 has a memory allocation issue that can cause denial of service...
CVE-2020-19719
A buffer overflow vulnerability in Ap4ElstAtom.cpp of Bento 1.5.1-628 leads to a denial of service DOS...
CVE-2020-19721
A heap buffer overflow vulnerability in Ap4TrunAtom.cpp of Bento 1.5.1-628 may lead to an out-of-bounds write while running mp42aac, leading to system crashes and a denial of service DOS...
CVE-2020-19718
An unhandled memory allocation failure in Core/Ap4Atom.cpp of Bento 1.5.1-628 causes a NULL pointer dereference, leading to a denial of service DOS...
CVE-2020-19722
An unhandled memory allocation failure in Core/Ap4Atom.cpp of Bento 1.5.1-628 causes a direct copy to NULL pointer dereference, leading to a denial of service DOS...
PYSEC-2025-32
BentoML is a Python library for building online serving systems optimized for AI apps and model inference. Prior to 1.4.8, there was an insecure deserialization in BentoML's runner server. By setting specific headers and parameters in the POST request, it is possible to execute any unauthorized...
PT-2025-3460 · Bento4 · Bento4
Name of the Vulnerable Software and Affected Versions: Bento4 mp42avc version 3bdc891602d19789b8e8626e4a3e613a937b4d35 Description: The issue allows a local attacker to execute arbitrary code via the AP4 MemoryByteStream::WritePartial function. This is a buffer overflow vulnerability...
