CVE-2025-8537 Axiomatic Bento4 mp4decrypt Mp4Decrypt.cpp SetDataSize allocation of resources

A vulnerability, which was classified as problematic, was found in Axiomatic Bento4 up to 1.6.0-641. Affected is the function AP4DataBuffer::SetDataSize of the file Mp4Decrypt.cpp of the component mp4decrypt. The manipulation leads to allocation of resources. It is possible to launch the attack...

PT-2022-24113

Name of the Vulnerable Software and Affected Versions Axiomatic Bento4 affected versions not specified Description A critical issue has been found in Axiomatic Bento4, affecting the function AP4 DataBuffer::SetDataSize of the Avcinfo component. This issue leads to a heap-based buffer overflow. Th...

Bento4 buffer error vulnerability

Bento4 is an open source C++ library for reading and writing MP4 files. A security vulnerability exists in Bento4 that stems from an affected AP4DataBuffer::SetDataSize function in the component Avcinfo, which could lead to a heap-based buffer overflow...

PT-2019-13495

Name of the Vulnerable Software and Affected Versions Bento4 version 1.5.1-627 Description The issue arises from the function AP4 DataBuffer::SetDataSize in Bento4, which fails to handle reallocation failures properly. This leads to a memory copy operation into a NULL pointer, resulting in a...