CVE-2025-8537

CVE-2025-8537 affects Axiomatic Bento4 (mp4decrypt component) up to version 1.6.0-641. The issue is in AP4_DataBuffer::SetDataSize within Mp4Decrypt.cpp, where input handling leads to resource allocation. This vulnerability can be triggered remotely and is described as having high attack complexi...

CVE-2025-8537 Axiomatic Bento4 mp4decrypt Mp4Decrypt.cpp SetDataSize allocation of resources

A vulnerability, which was classified as problematic, was found in Axiomatic Bento4 up to 1.6.0-641. Affected is the function AP4DataBuffer::SetDataSize of the file Mp4Decrypt.cpp of the component mp4decrypt. The manipulation leads to allocation of resources. It is possible to launch the attack...

CVE-2025-8537 Axiomatic Bento4 mp4decrypt Mp4Decrypt.cpp SetDataSize allocation of resources

A vulnerability, which was classified as problematic, was found in Axiomatic Bento4 up to 1.6.0-641. Affected is the function AP4DataBuffer::SetDataSize of the file Mp4Decrypt.cpp of the component mp4decrypt. The manipulation leads to allocation of resources. It is possible to launch the attack...