PT-2025-3461 · Bento4 · Bento4

Name of the Vulnerable Software and Affected Versions: Bento4 affected versions not specified Description: A floating-point exception FPE vulnerability exists in the AP4 TfraAtom::AP4 TfraAtom function. This issue may be related to the handling of floating-point operations within the specified...

CVE-2024-57513

A floating-point exception FPE vulnerability exists in the AP4TfraAtom::AP4TfraAtom function in Bento4...

CVE-2024-57513

A floating-point exception (FPE) vulnerability exists in the AP4_TfraAtom::AP4_TfraAtom function of the Bento4 C++ library, which is used for reading and writing MP4 files. The issue is rooted in the handling of floating-point operations within that specific function. While the CVSS 3.1 score of ...

CVE-2024-57513: Buffer Copy without Checking Size of Input

A floating-point exception FPE vulnerability exists in the AP4TfraAtom::AP4TfraAtom function in Bento4...

CVE-2024-57513

A floating-point exception FPE vulnerability exists in the AP4TfraAtom::AP4TfraAtom function in Bento4...

CVE-2024-57513

A floating-point exception FPE vulnerability exists in the AP4TfraAtom::AP4TfraAtom function in Bento4...

CVE-2023-51105

A floating point exception divide-by-zero vulnerability was discovered in Artifex MuPDF 1.23.4 in function bmpdecompressrle4 of load-bmp.c...

UBUNTU-CVE-2023-51105

A floating point exception divide-by-zero vulnerability was discovered in Artifex MuPDF 1.23.4 in function bmpdecompressrle4 of load-bmp.c...

Astra Linux – Vulnerability in libheif

A segmentation fault caused by a floating-point exception exists in libheif 1.15.1 when using crafted heif images through the heif::Fraction::round function in box.cc, which results in a denial of service...

DEBIAN-CVE-2024-50275

In the Linux kernel, the following vulnerability has been resolved: arm64/sve: Discard stale CPU state when handling SVE traps The logic for handling SVE traps manipulates saved FPSIMD/SVE state incorrectly, and a race with preemption can result in a task having TIFSVE set and TIFFOREIGNFPSTATE...

`fast-float` has multiple soundness issues

fast-float contains multiple soundness issues: 1. Undefined behavior when checking input length, which has been merged but no package pubished. 1. Many functions marked as safe with non-local safety guarantees The library is also unmaintained. Alternatives For quickly parsing floating-point numbe...

kernel: x86/fpu: Keep xfd_state in sync with MSR_IA32_XFD

In the Linux kernel, the following vulnerability has been resolved: x86/fpu: Keep xfdstate in sync with MSRIA32XFD The Linux kernel CVE team has assigned CVE-2024-35801 to this issue. Upstream advisory: https://lore.kernel.org/linux-cve-announce/2024051738-CVE-2024-35801-8038@gregkh/T...

ARM: 9410/1: vfp: Use asm volatile in fmrx/fmxr macros

...

SUSE CVE-2024-7883

When using Arm Cortex-M Security Extensions CMSE, Secure stack contents can be leaked to Non-secure state via floating-point registers when a Secure to Non-secure function call is made that returns a floating-point value and when this is the first use of floating-point since entering Secure state...

CVE-2024-7883

When using Arm Cortex-M Security Extensions CMSE, Secure stack contents can be leaked to Non-secure state via floating-point registers when a Secure to Non-secure function call is made that returns a floating-point value and when this is the first use of floating-point since entering Secure state...

CVE-2024-7883

When using Arm Cortex-M Security Extensions CMSE, Secure stack contents can be leaked to Non-secure state via floating-point registers when a Secure to Non-secure function call is made that returns a floating-point value and when this is the first use of floating-point since entering Secure state...

AZL-53888 CVE-2024-7883 affecting package clang for versions less than 18.1.2-4

When using Arm Cortex-M Security Extensions CMSE, Secure stack contents can be leaked to Non-secure state via floating-point registers when a Secure to Non-secure function call is made that returns a floating-point value and when this is the first use of floating-point since entering Secure state...

DEBIAN-CVE-2024-7883

When using Arm Cortex-M Security Extensions CMSE, Secure stack contents can be leaked to Non-secure state via floating-point registers when a Secure to Non-secure function call is made that returns a floating-point value and when this is the first use of floating-point since entering Secure state...

UBUNTU-CVE-2024-7883

When using Arm Cortex-M Security Extensions CMSE, Secure stack contents can be leaked to Non-secure state via floating-point registers when a Secure to Non-secure function call is made that returns a floating-point value and when this is the first use of floating-point since entering Secure state...

CVE-2024-7883 CMSE secure state may leak from stack to floating-point registers

When using Arm Cortex-M Security Extensions CMSE, Secure stack contents can be leaked to Non-secure state via floating-point registers when a Secure to Non-secure function call is made that returns a floating-point value and when this is the first use of floating-point since entering Secure state...