Bento4 Core/Ap4SampleEntry.cpp File Heap Buffer Overflow Vulnerability

Bento4 is an open source C++ library for reading and writing MP4 files. A heap buffer overflow vulnerability exists in AP4VisualSampleEntry::ReadFields in the Core/Ap4SampleEntry.cpp file in Bento4 version 1.5.0-617. A remote attacker could exploit this vulnerability to cause a denial of service ...

UBUNTU-CVE-2017-14639

AP4VisualSampleEntry::ReadFields in Core/Ap4SampleEntry.cpp in Bento4 1.5.0-617 uses incorrect character data types, which causes a stack-based buffer underflow and out-of-bounds write, leading to denial of service application crash or possibly unspecified other impact...