CVE-2025-25942

An issue in Bento4 v1.6.0-641 allows an attacker to obtain sensitive information via the the mp4fragment tool when processing invalid files. Specifically, memory allocated in SampleArray::SampleArray in Mp4Fragment.cpp is not properly released...

CVE-2025-25944

Buffer Overflow vulnerability in Bento4 v.1.6.0-641 allows a local attacker to execute arbitrary code via the Ap4RtpAtom.cpp, specifically in AP4RtpAtom::AP4RtpAtom, during the execution of mp4fragment with a crafted MP4 input file...

CVE-2025-25943

Buffer Overflow vulnerability in Bento4 v.1.6.0-641 allows a local attacker to execute arbitrary code via the AP4Stz2Atom::AP4Stz2Atom component located in Ap4Stz2Atom.cpp...

CVE-2025-25945

An issue in Bento4 v1.6.0-641 allows an attacker to obtain sensitive information via the the Mp4Fragment.cpp and in AP4DescriptorFactory::CreateDescriptorFromStream at Ap4DescriptorFactory.cpp...

The vulnerability of the AP4_StdcFileByteStream::ReadPartial() function in the ISO-MP4 Bento4 file reading and writing library allows a attacker to compromise the confidentiality, integrity, and accessibility of the protected information.

The vulnerability of the AP4StdcFileByteStream::ReadPartial function in the ISO-MP4 Bento4 file reading and writing library is related to the occurrence of operations outside the buffer in memory. Exploiting this vulnerability could allow an attacker to compromise the confidentiality, integrity,...

CVE-2024-57598

A floating point exception divide-by-zero vulnerability was discovered in Bento4 1.6.0-641 in function AP4TfraAtom of Ap4TfraAtom.cpp which allows a remote attacker to cause a denial of service vulnerability...

CVE-2022-3662

A vulnerability was found in Axiomatic Bento4. It has been declared as critical. This vulnerability affects the function GetOffset of the file Ap4Sample.h of the component mp42hls. The manipulation leads to use after free. The attack can be initiated remotely. The exploit has been disclosed to th...

CVE-2022-3666

A vulnerability, which was classified as critical, has been found in Axiomatic Bento4. Affected by this issue is the function AP4LinearReader::Advance of the file Ap4LinearReader.cpp of the component mp42ts. The manipulation leads to use after free. The attack may be launched remotely. The exploi...

CVE-2022-3664

A vulnerability classified as critical has been found in Axiomatic Bento4. Affected is the function AP4BitStream::WriteBytes of the file Ap4BitStream.cpp of the component avcinfo. The manipulation leads to heap-based buffer overflow. It is possible to launch the attack remotely. The exploit has...

CVE-2022-3670

A vulnerability was found in Axiomatic Bento4. It has been classified as critical. Affected is the function WriteSample of the component mp42hevc. The manipulation leads to heap-based buffer overflow. It is possible to launch the attack remotely. The exploit has been disclosed to the public and m...

CVE-2022-3665

A vulnerability classified as critical was found in Axiomatic Bento4. Affected by this vulnerability is an unknown functionality of the file AvcInfo.cpp of the component avcinfo. The manipulation leads to heap-based buffer overflow. The attack can be launched remotely. The exploit has been...

CVE-2022-3667

A vulnerability, which was classified as critical, was found in Axiomatic Bento4. This affects the function AP4MemoryByteStream::WritePartial of the file Ap4ByteStream.cpp of the component mp42aac. The manipulation leads to heap-based buffer overflow. It is possible to initiate the attack remotel...

CVE-2024-57598

A floating point exception divide-by-zero vulnerability was discovered in Bento4 1.6.0-641 in function AP4TfraAtom of Ap4TfraAtom.cpp which allows a remote attacker to cause a denial of service vulnerability...

CVE-2024-57598

A floating point exception divide-by-zero vulnerability was discovered in Bento4 1.6.0-641 in function AP4TfraAtom of Ap4TfraAtom.cpp which allows a remote attacker to cause a denial of service vulnerability...

CVE-2024-57598

A floating point exception divide-by-zero vulnerability was discovered in Bento4 1.6.0-641 in function AP4TfraAtom of Ap4TfraAtom.cpp which allows a remote attacker to cause a denial of service vulnerability...

CVE-2024-57598

A floating point exception divide-by-zero vulnerability was discovered in Bento4 1.6.0-641 in function AP4TfraAtom of Ap4TfraAtom.cpp which allows a remote attacker to cause a denial of service vulnerability...

PT-2025-5775

Name of the Vulnerable Software and Affected Versions: Bento4 version 1.6.0-641 Description: A floating point exception vulnerability, specifically a divide-by-zero error, was discovered in the AP4 TfraAtom function of Ap4TfraAtom.cpp. This issue allows a remote attacker to cause a denial of...

CVE-2024-57598

CVE-2024-57598 affects Bento4 1.6.0-641. The vulnerability is a floating point exception (divide-by-zero) in AP4_TfraAtom() of Ap4TfraAtom.cpp that allows a remote attacker to cause a denial of service. Documents confirm the affected component and root cause; no public patches are detailed in the...

Bento4 安全漏洞

Bento4 is an open source C++ library for reading and writing MP4 files from Axiomatic Systems. A security vulnerability exists in Bento4 version 1.6.0-641, which stems from a floating-point exception vulnerability in the AP4TfraAtom function of Ap4TfraAtom.cpp, which allows remote attackers to...

CVE-2025-0870

A vulnerability was found in Axiomatic Bento4 up to 1.6.0-641. It has been rated as critical. Affected by this issue is the function AP4DataBuffer::GetData in the library Ap4DataBuffer.h. The manipulation leads to heap-based buffer overflow. The attack may be launched remotely. The complexity of ...