Bento4 Buffer Overflow Vulnerability (CNVD-2018-14698)

Bento4 is an open source C++ library for reading and writing MP4 files. A heap buffer overflow vulnerability exists in AP4BytesToUInt16BE in the Core/Ap4Utils.h file in Bento4 version 1.5.1-624. An attacker can exploit this vulnerability to cause a heap buffer out-of-bounds read...