1323 matches found
CVE-2022-3812
A vulnerability was found in Axiomatic Bento4. It has been rated as problematic. Affected by this issue is the function AP4ContainerAtom::AP4ContainerAtom of the component mp4encrypt. The manipulation leads to memory leak. The attack may be launched remotely. The exploit has been disclosed to the...
Bento4 安全漏洞
Bento4 is an open source C++ library for reading and writing MP4 files. A security vulnerability exists in Bento4, which stems from a problem in the function AP4ContainerAtom::AP4ContainerAtom of the component mp4encrypt, which operates to cause a memory leak...
UBUNTU-CVE-2022-3668
A vulnerability has been found in Axiomatic Bento4 and classified as problematic. This vulnerability affects the function AP4AtomFactory::CreateAtomFromStream of the component mp4edit. The manipulation leads to memory leak. The attack can be initiated remotely. The exploit has been disclosed to t...
UBUNTU-CVE-2022-3663
A vulnerability was found in Axiomatic Bento4. It has been rated as problematic. This issue affects the function AP4StsdAtom of the file Ap4StsdAtom.cpp of the component MP4fragment. The manipulation leads to null pointer dereference. The attack may be initiated remotely. The exploit has been...
PT-2022-23516 · Axiomatic · Bento4
Name of the Vulnerable Software and Affected Versions: Axiomatic Bento4 affected versions not specified Description: A problematic issue affects the AP4 StsdAtom function of the Ap4StsdAtom.cpp file in the MP4fragment component, leading to a null pointer dereference. The attack can be initiated...
Hands-On IoT Hacking: Rapid7 at DEF CON 30 IoT Village, Pt. 2
Welcome back to our blog series on Rapid7's IoT Village exercise from DEF CON 30. Last week, we covered the basics of the exercise and achieving access to flash memory. In this post, we'll cover how to extract partition data. Extracting partition data The next step in our hands-on IoT hacking...
UBUNTU-CVE-2022-43035
An issue was discovered in Bento4 v1.6.0-639. There is a heap-buffer-overflow in AP4Dec3Atom::AP4Dec3Atom at Ap4Dec3Atom.cpp, leading to a Denial of Service DoS, as demonstrated by mp42aac...
Bento4 资源管理错误漏洞
Bento4 is an open source C library for reading and writing MP4 files. version v1.6.0-639 of Bento4 suffers from a denial of service vulnerability that stems from a boundary error in the component AP4HdlrAtom::AP4HdlrAtom when handling untrusted input. An attacker could exploit the vulnerability t...
Bento4 缓冲区错误漏洞
Bento4 is an open source C library for reading and writing MP4 files. version v1.6.0-639 of Bento4 suffers from a denial of service vulnerability, which stems from a boundary error in AP4Dec3Atom::AP4Dec3Atom in Ap4Dec3Atom.cpp when handling untrusted input. An attacker could exploit the...
October 11, 2022—KB5018411 (OS Build 14393.5427) - EXPIRED
None None...
CVE-2022-41429
Bento4 v1.6.0-639 was discovered to contain a heap overflow via the AP4Atom::TypeFromString function in mp4tag...
CVE-2022-41426
Bento4 v1.6.0-639 was discovered to contain a memory leak via the AP4AtomFactory::CreateAtomFromStream function in mp4split...
UBUNTU-CVE-2022-41426
Bento4 v1.6.0-639 was discovered to contain a memory leak via the AP4AtomFactory::CreateAtomFromStream function in mp4split...
UBUNTU-CVE-2022-41429
Bento4 v1.6.0-639 was discovered to contain a heap overflow via the AP4Atom::TypeFromString function in mp4tag...
UBUNTU-CVE-2022-41424
Bento4 v1.6.0-639 was discovered to contain a memory leak via the AP4SttsAtom::Create function in mp42hls...
Bento4 安全漏洞
Bento4 is an open source C library for reading and writing MP4 files. Bento4 v1.6.0-639 contains a denial of service vulnerability that stems from a memory leak in the AP4AtomFactory::CreateAtomFromStream method of the mp4split component. An attacker could exploit the vulnerability to cause a...
PT-2022-25863 · Bento4 · Bento4
Name of the Vulnerable Software and Affected Versions: Bento4 version 1.6.0-639 Description: A heap overflow issue was discovered in the AP4 Atom::TypeFromString function within the mp4tag component. Recommendations: For Bento4 version 1.6.0-639, consider avoiding the use of the AP4...
Bento4 缓冲区错误漏洞
Bento4 is an open source C++ library for reading and writing MP4 files. A buffer error vulnerability exists in Bento4 v1.6.0-639, which stems from a heap overflow in the AP4Atom::TypeFromString function of the mp4tag component, and can be exploited by an attacker to compromise the confidentiality...