AZL-11321 CVE-2022-41742 affecting package nginx for versions less than 1.22.1-1

NGINX Open Source before versions 1.23.2 and 1.22.1, NGINX Open Source Subscription before versions R2 P1 and R1 P1, and NGINX Plus before versions R27 P1 and R26 P1 have a vulnerability in the module ngxhttpmp4module that might allow a local attacker to cause a worker process crash, or might...

UBUNTU-CVE-2022-41742

NGINX Open Source before versions 1.23.2 and 1.22.1, NGINX Open Source Subscription before versions R2 P1 and R1 P1, and NGINX Plus before versions R27 P1 and R26 P1 have a vulnerability in the module ngxhttpmp4module that might allow a local attacker to cause a worker process crash, or might...

Design/Logic Flaw

NGINX Open Source before versions 1.23.2 and 1.22.1, NGINX Open Source Subscription before versions R2 P1 and R1 P1, and NGINX Plus before versions R27 P1 and R26 P1 have a vulnerability in the module ngxhttpmp4module that might allow a local attacker to cause a worker process crash, or might...

UBUNTU-CVE-2022-41741

NGINX Open Source before versions 1.23.2 and 1.22.1, NGINX Open Source Subscription before versions R2 P1 and R1 P1, and NGINX Plus before versions R27 P1 and R26 P1 have a vulnerability in the module ngxhttpmp4module that might allow a local attacker to corrupt NGINX worker memory, resulting in...

UBUNTU-CVE-2022-40884

Bento4 1.6.0 has memory leaks via the mp4fragment...

Bento4 资源管理错误漏洞

Bento4 is an open source C library for reading and writing MP4 files. version v1.6.0-639 of Bento4 suffers from a denial of service vulnerability that stems from a boundary error in the component AP4HdlrAtom::AP4HdlrAtom when handling untrusted input. An attacker could exploit the vulnerability t...

F5 Nginx 缓冲区错误漏洞

F5 Nginx is a lightweight web server/reverse proxy server and email IMAP/POP3 proxy server from F5 Inc. distributed under the BSD-like protocol. F5 Nginx suffers from a buffer error vulnerability that stems from its ngxhttpmp4module module that could allow a local attacker to cause a work process...

Bento4 安全漏洞

Bento4 is an open source C++ library for reading and writing MP4 files. A security vulnerability exists in Bento4 version 1.6.0, which stems from a memory leak discovered via mp4 clips...

nginx -- Two vulnerabilities

NGINX Development Team reports: Two security issues were identified in the ngxhttpmp4module, which might allow an attacker to cause a worker process crash or worker process memory disclosure by using a specially crafted mp4 file, or might have potential other impact CVE-2022-41741, CVE-2022-41742...

PT-2022-5185

Name of the Vulnerable Software and Affected Versions NGINX Open Source versions 1.23.2 and 1.22.1 and earlier NGINX Open Source Subscription versions R2 P1 and R1 P1 and earlier NGINX Plus versions R27 P1 and R26 P1 and earlier Description The issue is related to a buffer-over-read vulnerability...

Bento4 AP4_BitReader::ReadBits Buffer Overflow Vulnerability

Bento4 is an open source C++ library for reading and writing MP4 files. A buffer overflow vulnerability exists in Bento4 version v1.6.0-639, which stems from a heap overflow in the AP4BitReader::ReadBits function of the mp4mux component. An attacker could exploit the vulnerability to affect the...

Bento4 AP4_AtomFactory::CreateAtomFromStream Denial of Service Vulnerability

Bento4 is an open source C library for reading and writing MP4 files. Bento4 v1.6.0-639 contains a denial of service vulnerability that stems from a memory leak in the AP4AtomFactory::CreateAtomFromStream method of the mp4split component. An attacker could exploit the vulnerability to cause a...

Bento4 AP4_Atom::TypeFromString Buffer Overflow Vulnerability

Bento4 is an open source C++ library for reading and writing MP4 files. A buffer error vulnerability exists in Bento4 v1.6.0-639, which stems from a heap overflow in the AP4Atom::TypeFromString function of the mp4tag component, and can be exploited by an attacker to compromise the confidentiality...

Bento4 AP4_SttsAtom::Create Denial of Service Vulnerability

Bento4 is an open source C library for reading and writing MP4 files. Bento4 v1.6.0-639 contains a denial of service vulnerability that stems from a memory leak in the AP4SttsAtom::Create method of the mp42hls component. An attacker could exploit the vulnerability to cause a denial of service...

Bento4 AP4_Processor::ProcessFragments Denial of Service Vulnerability

Bento4 is an open source C library for reading and writing MP4 files. Bento4 v1.6.0-639 contains a denial of service vulnerability that stems from a segmentation violation in the AP4Processor::ProcessFragments method of the mp4decrypt component. An attacker could exploit the vulnerability to caus...

Bento4 Ap4Array.h Denial of Service Vulnerability

Bento4 is an open source C++ library for reading and writing MP4 files. A denial of service vulnerability exists in Bento4 version 1.6.0-639, which stems from excessive memory consumption in the AP4Array ::EnsureCapacity function in Core/Ap4Array.h. The vulnerability can be exploited to cause a...

CVE-2022-41427

Bento4 v1.6.0-639 was discovered to contain a memory leak in the AP4AvcFrameParser::Feed function in mp4mux...

Bento4 缓冲区错误漏洞

Bento4 is an open source C++ library for reading and writing MP4 files. A buffer error vulnerability exists in Bento4 v1.6.0-639, which stems from a heap overflow in the AP4BitReader::ReadBit method of the mp4mux component...

PT-2022-25862 · Bento4 · Bento4

Name of the Vulnerable Software and Affected Versions: Bento4 version 1.6.0-639 Description: A heap overflow issue was discovered in the AP4 BitReader::ReadBits function within the mp4mux component of Bento4. Recommendations: For Bento4 version 1.6.0-639, consider restricting access to the mp4mux...

CVE-2022-2122

A flaw was found in GStreamer. An integer overflow can lead to a heap-based buffer overflow in the qt demuxer when processing a specially crafted QuickTime/MP4 file using zlib decompression. This vulnerability can result in application crash, memory corruption, and code execution...