CVE-2024-25451

Bento4 v1.6.0-640 was discovered to contain an out-of-memory bug via the AP4DataBuffer::ReallocateBuffer function...

CVE-2024-30809

An issue was discovered in Bento4 v1.6.0-641-2-g1529b83. There is a heap-use-after-free in Ap4Sample.h in AP4Sample::GetOffset const, leading to a Denial of Service DoS, as demonstrated by mp42ts...

CVE-2024-30806

CVE-2024-30806 affects Bento4 v1.6.0-641-2-g1529b83. The issue is a heap overflow in AP4_Dec3Atom::AP4_Dec3Atom (Ap4Dec3Atom.cpp) that leads to a Denial of Service (DoS). Demonstrated by mp42aac. Connected advisories corroborate the same description. The Red Hat entry mirrors the DoS without prov...

Design/Logic Flaw

Bento4 v1.6.0-640 was discovered to contain an out-of-memory bug via the AP4DataBuffer::ReallocateBuffer function...

Design/Logic Flaw

Bento4 v1.6.0-640 was discovered to contain an out-of-memory bug via the AP4UrlAtom::AP4UrlAtom function...

CVE-2024-25454

Bento4 v1.6.0-640 contains a NULL pointer dereference in AP4_DescriptorFinder::Test(). The CVE entry documents this as the root cause, with a high availability impact (AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H). The official sources in the provided documents consistently reference Bento4 1.6.0-640 and ...

CVE-2023-38666

Bento4 v1.6.0-639 was discovered to contain a segmentation violation via the AP4Processor::ProcessFragments function in mp4encrypt...

CVE-2023-29575

Bento4 v1.6.0-639 was discovered to contain an out-of-memory bug in the mp42aac component...

Design/Logic Flaw

Bento4 v1.6.0-639 was discovered to contain an out-of-memory bug in the mp42aac component...

CVE-2023-29576

Bento4 v1.6.0-639 was discovered to contain a segmentation violation via the AP4TrunAtom::SetDataOffsetint function in Ap4TrunAtom.h...

CVE-2023-29576

CVE-2023-29576 affects Bento4 v1.6.0-639. The vulnerability is a segmentation violation in AP4_TrunAtom::SetDataOffset(int) in Ap4TrunAtom.h, leading to denial of service. Sources consistently describe Bento4 v1.6.0-639 as affected and confirm the issue is a crash/DoS vector rather than remote co...

Heap overflow

An issue was discovered in Bento4 v1.6.0-639. There is a heap-buffer-overflow in AP4Dec3Atom::AP4Dec3Atom at Ap4Dec3Atom.cpp, leading to a Denial of Service DoS, as demonstrated by mp42aac...

CVE-2022-43035

An issue was discovered in Bento4 v1.6.0-639. There is a heap-buffer-overflow in AP4Dec3Atom::AP4Dec3Atom at Ap4Dec3Atom.cpp, leading to a Denial of Service DoS, as demonstrated by mp42aac...

Memory corruption

An issue was discovered in Bento4 v1.6.0-639. There is a memory leak in AP4DescriptorFactory::CreateDescriptorFromStream in Core/Ap4DescriptorFactory.cpp, as demonstrated by mp42aac...

CVE-2022-40885

Bento4 v1.6.0-639 has a memory allocation issue that can cause denial of service...

CVE-2022-43032

CVE-2022-43032 affects Bento4 v1.6.0-639. The issue is a memory leak in AP4_DescriptorFactory::CreateDescriptorFromStream (Core/Ap4DescriptorFactory.cpp) that can lead to denial of service. Exploitation details or in‑the‑wild status are not provided in the supplied documents. No patch/version fix...

CVE-2022-40885

Bento4 v1.6.0-639 has a memory allocation issue that can cause denial of service...

CVE-2022-41424

Bento4 v1.6.0-639 was discovered to contain a memory leak via the AP4SttsAtom::Create function in mp42hls...

CVE-2022-41429

Bento4 v1.6.0-639 was discovered to contain a heap overflow via the AP4Atom::TypeFromString function in mp4tag...

CVE-2022-41423

Bento4 v1.6.0-639 was discovered to contain a segmentation violation in the mp4fragment component...