PT-2021-8689

Name of the Vulnerable Software and Affected Versions Bento4 version 1.5.1.0 Description The issue allows remote attackers to cause a denial of service, resulting in an application crash. This is related to a memory allocation failure in the AP4 CttsAtom class, located in Core/Ap4CttsAtom.cpp. Th...

Bento4 安全漏洞

Bento4 is an open source C library for reading and writing MP4 files. Bento4 version 1.5.1.0 suffers from a denial of service vulnerability that stems from a memory allocation failure in the AP4 CttsAtom class in Core/Ap4CttsAtom.cpp, which can be exploited by remote attackers to cause a denial o...

CVE-2021-29981

An issue present in lowering/register allocation could have led to obscure but deterministic register confusion failures in JITted code that would lead to a potentially exploitable crash. This vulnerability affects Firefox 91 and Thunderbird 91...

Unspecified vulnerability in Bento4 (CNVD-2021-51794)

Bento4 is an open source C++ library for reading and writing MP4 files. A security vulnerability exists in Bento4 version 1.5.1-628, which stems from an unhandled memory allocation failure in ""Core/Ap4Atom.cpp"" that results in the dereferencing of the NULL pointer, and can be exploited by an...

CVE-2020-19720

An unhandled memory allocation failure in Core/AP4IkmsAtom.cpp of Bento 1.5.1-628 causes a NULL pointer dereference, leading to a denial of service DOS...

CVE-2020-19722

An unhandled memory allocation failure in Core/Ap4Atom.cpp of Bento 1.5.1-628 causes a direct copy to NULL pointer dereference, leading to a denial of service DOS...

CVE-2020-19718

An unhandled memory allocation failure in Core/Ap4Atom.cpp of Bento 1.5.1-628 causes a NULL pointer dereference, leading to a denial of service DOS...

CVE-2020-19717

An unhandled memory allocation failure in Core/Ap48bdlAtom.cpp of Bento 1.5.1-628 causes a NULL pointer dereference, leading to a denial of service DOS...

Null pointer dereference

An unhandled memory allocation failure in Core/Ap4Atom.cpp of Bento 1.5.1-628 causes a NULL pointer dereference, leading to a denial of service DOS...

Null pointer dereference

An unhandled memory allocation failure in Core/Ap4Atom.cpp of Bento 1.5.1-628 causes a direct copy to NULL pointer dereference, leading to a denial of service DOS...

Null pointer dereference

An unhandled memory allocation failure in Core/AP4IkmsAtom.cpp of Bento 1.5.1-628 causes a NULL pointer dereference, leading to a denial of service DOS...

CVE-2020-19722

An unhandled memory allocation failure in Core/Ap4Atom.cpp of Bento 1.5.1-628 causes a direct copy to NULL pointer dereference, leading to a denial of service DOS...

CVE-2020-19720

Bento4 (open source C++ library for MP4) is affected by CVE-2020-19720 due to an unhandled memory allocation failure in Core/AP4IkmsAtom.cpp, causing a NULL pointer dereference and a denial of service. The vulnerability is demonstrated in Bento4 version 1.5.1-628. Connected sources indicate a buf...

CVE-2020-19717

An unhandled memory allocation failure in Core/Ap48bdlAtom.cpp of Bento 1.5.1-628 causes a NULL pointer dereference, leading to a denial of service DOS...

CVE-2020-19720: Buffer Copy without Checking Size of Input

An unhandled memory allocation failure in Core/AP4IkmsAtom.cpp of Bento 1.5.1-628 causes a NULL pointer dereference, leading to a denial of service DOS...

CVE-2020-19717: NULL Pointer Dereference

An unhandled memory allocation failure in Core/Ap48bdlAtom.cpp of Bento 1.5.1-628 causes a NULL pointer dereference, leading to a denial of service DOS...

CVE-2020-19722: Buffer Copy without Checking Size of Input

An unhandled memory allocation failure in Core/Ap4Atom.cpp of Bento 1.5.1-628 causes a direct copy to NULL pointer dereference, leading to a denial of service DOS...

Bento4 缓冲区错误漏洞

Bento4 is an open source C++ library for reading and writing MP4 files. Bento4 suffers from a buffer overflow vulnerability that stems from an unhandled memory allocation failure in Core/AP4IkmsAtom.cpp in Bento4 version 1.5.1-628 that results in a null pointer dereference, which can be exploited...

Advisory ROSA-SA-2021-1937

Software: openslp 2.0.0 OS: Cobalt 7.9 CVE-ID: CVE-2016-4912 CVE-Crit: HIGH CVE-DESC: The xrealloc function in xlspxmalloc.c in OpenSLP 2.0.0 allows remote attackers to cause a denial of service dereferencing a null pointer and crashing through a large number of created packets, causing a memory...

Advisory ROSA-SA-2021-1907

Software: libzip 0.10.1 OS: Cobalt 7.9 CVE-ID: CVE-2015-2331 CVE-Crit: HIGH CVE-DESC: An integer overflow in the zipcdirnew function in zipdirent.c in libzip 0.11.2 and earlier, as used in the ZIP extension in PHP before 5.4.39, 5.5.x before 5.5.23, and 5.6.x before 5.6. 7 and other products,...