CVE-2022-35165

The CVE-2022-35165 issue affects Bento4-1.6.0-639, specifically in AP4_SgpdAtom::AP4_SgpdAtom(). A crafted MP4 input can cause a Denial of Service. Multiple sources (NVD, Red Hat, Ubuntu, OSV, etc.) describe the vulnerability identically. The provided documents do not include a confirmed patch or...

CVE-2022-35165

An issue in AP4SgpdAtom::AP4SgpdAtom of Bento4-1.6.0-639 allows attackers to cause a Denial of Service DoS via a crafted mp4 input...

Bento4 Denial of Service Vulnerability (CNVD-2022-60684)

Bento4 is an open source C library for reading and writing MP4 files. version 1.6.0-638 of Bento4 suffers from a denial of service vulnerability that stems from insufficient allocator memory and can be exploited by attackers to cause a denial of service...

Bento4 Denial of Service Vulnerability (CNVD-2022-60672)

Bento4 is a C library for reading and writing MP4 files. Bento4 version 1.6.0-638 contains a denial-of-service vulnerability that stems from a null pointer reference in the AP4DescriptorListInspector::Action function in Ap4Descriptor.h:124, which could be exploited to perform a denial-of-service...

CVE-2022-31282

Bento4 MP4Dump v1.2 was discovered to contain a segmentation violation via an unknown address at /Source/C++/Core/Ap4DataBuffer.cpp:175...

CVE-2021-40592

GPAC version before commit 71460d72ec07df766dab0a4d52687529f3efcf0a version v1.0.1 onwards contains loop with unreachable exit condition 'infinite loop' vulnerability in ISOBMFF reader filter, isoffinread.c. Function isoffinprocess can result in DoS by infinite loop. To exploit, the victim must...

DEBIAN-CVE-2021-40592

GPAC version before commit 71460d72ec07df766dab0a4d52687529f3efcf0a version v1.0.1 onwards contains loop with unreachable exit condition 'infinite loop' vulnerability in ISOBMFF reader filter, isoffinread.c. Function isoffinprocess can result in DoS by infinite loop. To exploit, the victim must...

CVE-2021-40592

GPAC version before commit 71460d72ec07df766dab0a4d52687529f3efcf0a version v1.0.1 onwards contains loop with unreachable exit condition 'infinite loop' vulnerability in ISOBMFF reader filter, isoffinread.c. Function isoffinprocess can result in DoS by infinite loop. To exploit, the victim must...

CVE-2021-40592

GPAC version before commit 71460d72ec07df766dab0a4d52687529f3efcf0a version v1.0.1 onwards contains loop with unreachable exit condition 'infinite loop' vulnerability in ISOBMFF reader filter, isoffinread.c. Function isoffinprocess can result in DoS by infinite loop. To exploit, the victim must...

CVE-2021-40592

GPAC version before commit 71460d72ec07df766dab0a4d52687529f3efcf0a version v1.0.1 onwards contains loop with unreachable exit condition 'infinite loop' vulnerability in ISOBMFF reader filter, isoffinread.c. Function isoffinprocess can result in DoS by infinite loop. To exploit, the victim must...

UBUNTU-CVE-2021-40592

GPAC version before commit 71460d72ec07df766dab0a4d52687529f3efcf0a version v1.0.1 onwards contains loop with unreachable exit condition 'infinite loop' vulnerability in ISOBMFF reader filter, isoffinread.c. Function isoffinprocess can result in DoS by infinite loop. To exploit, the victim must...

Design/Logic Flaw

GPAC version before commit 71460d72ec07df766dab0a4d52687529f3efcf0a version v1.0.1 onwards contains loop with unreachable exit condition 'infinite loop' vulnerability in ISOBMFF reader filter, isoffinread.c. Function isoffinprocess can result in DoS by infinite loop. To exploit, the victim must...

CVE-2021-40592

GPAC version before commit 71460d72ec07df766dab0a4d52687529f3efcf0a version v1.0.1 onwards contains loop with unreachable exit condition 'infinite loop' vulnerability in ISOBMFF reader filter, isoffinread.c. Function isoffinprocess can result in DoS by infinite loop. To exploit, the victim must...

CVE-2021-40592

GPAC vulnerability CVE-2021-40592 affects GPAC versions before commit 71460d72ec07df766dab0a4d52687529f3efcf0a (version v1.0.1 onwards). The issue is an infinite loop in the ISOBMFF reader filter (isoffin_read.c) in isoffin_process(), which can cause a denial of service if a user opens a speciall...

CVE-2021-40592

GPAC version before commit 71460d72ec07df766dab0a4d52687529f3efcf0a version v1.0.1 onwards contains loop with unreachable exit condition 'infinite loop' vulnerability in ISOBMFF reader filter, isoffinread.c. Function isoffinprocess can result in DoS by infinite loop. To exploit, the victim must...

Bento4 Denial of Service Vulnerability (CNVD-2022-74158)

Bento4 is an open source C library for reading and writing MP4 files. Bento4 v1.6.0.0 contains a denial of service vulnerability that stems from a segmentation error in the /x8664/multiarch/strlen-avx2.S component, which could be exploited by an attacker to cause a denial of service...

Bento4 安全漏洞

Bento4 is an open source C library for reading and writing MP4 files. Bento4 v1.6.0.0 contains a denial of service vulnerability that stems from a segmentation error in the /x8664/multiarch/strlen-avx2.S component, which could be exploited by an attacker to cause a denial of service...

Buffer Overflow

libgpac.so is vulnerable to buffer overflows. The vulnerability exists in diSTboxread in boxcode3gpp.c because when gpac parses an mp4 file, the video content and the buffer length is controllable by the user which causes a stack overflow...

The vulnerability of the gf_isom_oinf_read_entry function in the MP4Box component of the GPAC multimedia platform allows a hacker to gain access to confidential data.

The vulnerability of the gfisomoinfreadEntry function in the MP4Box component of the GPAC multimedia platform is related to improper memory release before deleting the last reference. Exploiting this vulnerability allows a remote attacker to gain access to confidential data through a specially...

The vulnerability of the stszin function in the mp4read.c component of the Freeware Advanced Audio Decoder 2 (FAAD2) allows a hacker to gain access to confidential data, compromise its integrity, and cause service interruptions.

The vulnerability of the stszin function in the mp4read.c component of the Freeware Advanced Audio Decoder 2 FAAD2 audio decoder is related to buffer overflow attacks. Exploiting this vulnerability allows an attacker to gain access to confidential data, compromise its integrity, and cause service...