CVE-2017-14258

In the SDK in Bento4 1.5.0-616, SetItemCount in Core/Ap4StscAtom.h file contains a Write Memory Access Violation vulnerability. It is possible to exploit this vulnerability and possibly execute arbitrary code by opening a crafted .MP4 file...

CVE-2017-14260

In the SDK in Bento4 1.5.0-616, the AP4StssAtom class in Ap4StssAtom.cpp contains a Write Memory Access Violation vulnerability. It is possible to exploit this vulnerability and possibly execute arbitrary code by opening a crafted .MP4 file...

CVE-2017-14258

The CVE-2017-14258 entry applies to Bento4.0 SDK, specifically Bento4 1.5.0-616, where SetItemCount in Core/Ap4StscAtom.h contains a Write Memory Access Violation vulnerability. An attacker could exploit a crafted .MP4 file to potentially execute arbitrary code. The connected documents corroborat...

PT-2017-13329

Name of the Vulnerable Software and Affected Versions Bento4 version 1.5.0-616 Description The issue is related to a Write Memory Access Violation vulnerability in the AP4 StssAtom class. This vulnerability can be exploited by opening a crafted .MP4 file, potentially allowing the execution of...

PT-2017-13327

Name of the Vulnerable Software and Affected Versions Bento4 version 1.5.0-616 Description The issue is related to a Write Memory Access Violation vulnerability in the SetItemCount function within the Core/Ap4StscAtom.h file of the Bento4 SDK. This vulnerability can be exploited by opening a...

PT-2017-13328

Name of the Vulnerable Software and Affected Versions Bento4 version 1.5.0-616 Description The issue is related to a Write Memory Access Violation vulnerability in the AP4 StscAtom class. This vulnerability can be exploited by opening a crafted .MP4 file, potentially allowing the execution of...

CVE-2017-14258: Improper Restriction of Operations within the Bounds of a Memory Buffer

In the SDK in Bento4 1.5.0-616, SetItemCount in Core/Ap4StscAtom.h file contains a Write Memory Access Violation vulnerability. It is possible to exploit this vulnerability and possibly execute arbitrary code by opening a crafted .MP4 file...

CVE-2017-14259: Improper Restriction of Operations within the Bounds of a Memory Buffer

In the SDK in Bento4 1.5.0-616, the AP4StscAtom class in Ap4StscAtom.cpp contains a Write Memory Access Violation vulnerability. It is possible to exploit this vulnerability and possibly execute arbitrary code by opening a crafted .MP4 file...

CVE-2017-14260: Improper Restriction of Operations within the Bounds of a Memory Buffer

In the SDK in Bento4 1.5.0-616, the AP4StssAtom class in Ap4StssAtom.cpp contains a Write Memory Access Violation vulnerability. It is possible to exploit this vulnerability and possibly execute arbitrary code by opening a crafted .MP4 file...

GStreamer gst-plugins-bad Plugin - NULL Pointer Dereference

GStreamer gst-plugins-bad Plugin - NULL Pointer Dereference Source: https://bugzilla.gnome.org/showbug.cgi?id=775120 The attached file will cause a null pointer access and segfault in the mpegts parser. Current git code, found with afl. ASAN stack trace:...

CVE-2017-7741

In libsndfile before 1.0.28, an error in the "flacbuffercopy" function flac.c can be exploited to cause a segmentation violation with write memory access via a specially crafted FLAC file during a resample attempt, a similar issue to CVE-2017-7585...

CVE-2017-7741

In libsndfile before 1.0.28, an error in the "flacbuffercopy" function flac.c can be exploited to cause a segmentation violation with write memory access via a specially crafted FLAC file during a resample attempt, a similar issue to CVE-2017-7585...

PT-2017-17920

Name of the Vulnerable Software and Affected Versions libsndfile versions prior to 1.0.28 Description The issue is related to an error in the flac buffer copy function, which can be exploited to cause a segmentation violation with write memory access. This can occur when a specially crafted FLAC...