Bento4 Ap4File.cpp Denial of Service Vulnerability

Bento4 is an open source C++ library for reading and writing MP4 files. A denial of service vulnerability exists in Bento4 version 1.6.0-639, which stems from a null pointer dereference in AP4File::ParseStream in Core/Ap4File.cpp. An attacker could exploit the vulnerability to cause a denial of...

Bento4 Ap4File.cpp File Denial of Service Vulnerability

Bento4 is an open source C++ library for reading and writing MP4 files. A security vulnerability exists in the 'AP4File::ParseStream' function of the Ap4File.cpp file in Bento4 version 1.5.1-624. A remote attacker can exploit this vulnerability to cause a denial of service infinite loop with the...

CVE-2018-14445

Summary: Bento4 library (v1.5.1-624) contains a vulnerability in AP4_File::ParseStream (Ap4File.cpp) that allows remote attackers to cause a denial of service (infinite loop) via a crafted MP4 file. The issue is documented across multiple sources (NVD, CNVD, OSV, Ubuntu listings). The connected d...