Bento4 Denial of Service Vulnerability

Bento4 is a C++ class library and tool for reading and writing ISO-MP4 files. A denial of service vulnerability exists in the AP4FtypAtom class in Core/Ap4FtypAtom.cpp in Bento4 1.5.1.0. An attacker can exploit this vulnerability to cause a denial of service by triggering a specially crafted MP4...

PT-2018-16841

Name of the Vulnerable Software and Affected Versions Bento4 version 1.5.1.0 Description The issue is related to an infinite loop in the AP4 FtypAtom class, which can be triggered by a crafted MP4 file. This occurs due to size mishandling in the Core/Ap4FtypAtom.cpp component of Bento4...