CVE-2024-30806

CVE-2024-30806 affects Bento4 v1.6.0-641-2-g1529b83. The issue is a heap overflow in AP4_Dec3Atom::AP4_Dec3Atom (Ap4Dec3Atom.cpp) that leads to a Denial of Service (DoS). Demonstrated by mp42aac. Connected advisories corroborate the same description. The Red Hat entry mirrors the DoS without prov...

Bento4 安全漏洞

Bento4 is an open source C++ library for reading and writing MP4 files. A security vulnerability exists in the Bento4 v1.6.0-641-2-g1529b83 release that stems from a denial of service issue in the AP4Dec3Atom::AP4Dec3Atom method of the Ap4Dec3Atom.cpp file...

CVE-2024-31003

CVE-2024-31003 describes a buffer overflow in Bento4 v1.6.0-641, triggered by AP4_MemoryByteStream::WritePartial in Ap4ByteStream.cpp, enabling remote code execution. Documented by multiple sources (NVD/Red Hat/CNNVD/OSV/CVElist) confirms Bento4 as affected; no vendor-supplied patch details are p...

CVE-2024-31003

Buffer Overflow vulnerability in Bento4 Bento v.1.6.0-641 allows a remote attacker to execute arbitrary code via the AP4MemoryByteStream::WritePartial at Ap4ByteStream.cpp...

CVE-2024-30806

An issue was discovered in Bento4 v1.6.0-641-2-g1529b83. There is a heap overflow in AP4Dec3Atom::AP4Dec3Atom at Ap4Dec3Atom.cpp, leading to a Denial of Service DoS, as demonstrated by mp42aac...

CVE-2024-30807

An issue was discovered in Bento4 v1.6.0-641-2-g1529b83. There is a heap-use-after-free in AP4UnknownAtom::AP4UnknownAtom at Ap4Atom.cpp, leading to a Denial of Service DoS, as demonstrated by mp42ts...

CVE-2024-30806

An issue was discovered in Bento4 v1.6.0-641-2-g1529b83. There is a heap overflow in AP4Dec3Atom::AP4Dec3Atom at Ap4Dec3Atom.cpp, leading to a Denial of Service DoS, as demonstrated by mp42aac...

CVE-2024-30808

CVE-2024-30808 affects Bento4 v1.6.0-641-2-g1529b83, where a heap-use-after-free in AP4_SubStream::~AP4_SubStream (Ap4ByteStream.cpp) leads to a Denial of Service. The issue is demonstrated by mp42ts. Affected component: Bento4 library; root cause: heap-use-after-free in AP4_SubStream destructor....

CVE-2024-31002

Buffer Overflow vulnerability in Bento4 Bento v.1.6.0-641 allows a remote attacker to execute arbitrary code via the AP4 BitReader::ReadCache at Ap4Utils.cpp component...

CVE-2024-30807

An issue was discovered in Bento4 v1.6.0-641-2-g1529b83. There is a heap-use-after-free in AP4UnknownAtom::AP4UnknownAtom at Ap4Atom.cpp, leading to a Denial of Service DoS, as demonstrated by mp42ts...

Bento4 安全漏洞

Bento4 is an open source C++ library for reading and writing MP4 files. A security vulnerability exists in the Bento4 v1.6.0-641-2-g1529b83 release that stems from a denial of service issue in the AP4UnknownAtom::AP4UnknownAtom method of the Ap4Atom.cpp file...

CVE-2024-30808

An issue was discovered in Bento4 v1.6.0-641-2-g1529b83. There is a heap-use-after-free in AP4SubStream::AP4SubStream at Ap4ByteStream.cpp, leading to a Denial of Service DoS, as demonstrated by mp42ts...

Bento4 安全漏洞

Bento4 is an open source C++ library for reading and writing MP4 files. A security vulnerability exists in the Bento4 v1.6.0-641-2-g1529b83 version that originates from a denial of service issue in the AP4SubStream::AP4SubStream method of the Ap4ByteStream.cpp file...

CVE-2024-31002

CVE-2024-31002 describes a buffer overflow in Bento4 v1.6.0-641, exploitable via the AP4 BitReader::ReadCache() function in Ap4Utils.cpp, allowing remote arbitrary-code execution. The issue affects Bento4’s Ap4Utils.cpp/AP4_BitReader::ReadCache without proper input length validation. Public refer...

CVE-2024-31003

Buffer Overflow vulnerability in Bento4 Bento v.1.6.0-641 allows a remote attacker to execute arbitrary code via the AP4MemoryByteStream::WritePartial at Ap4ByteStream.cpp...

Bento4 安全漏洞

Bento4 is an open source C++ library for reading and writing MP4 files. A security vulnerability exists in Bento4 version v.1.6.0-641. A remote attacker can exploit this vulnerability to execute arbitrary code via Ap4MdhdAtom.cpp,AP4MdhdAtom::AP4MdhdAtom,mp4fragment...

CVE-2024-30806

An issue was discovered in Bento4 v1.6.0-641-2-g1529b83. There is a heap overflow in AP4Dec3Atom::AP4Dec3Atom at Ap4Dec3Atom.cpp, leading to a Denial of Service DoS, as demonstrated by mp42aac...

CVE-2024-30808

An issue was discovered in Bento4 v1.6.0-641-2-g1529b83. There is a heap-use-after-free in AP4SubStream::AP4SubStream at Ap4ByteStream.cpp, leading to a Denial of Service DoS, as demonstrated by mp42ts...

Bento4 Memory Disclosure Vulnerability

Bento4 is an open source C++ library for reading and writing MP4 files. Bento4 suffers from a memory leak vulnerability that originates from AP4Movie::AP4Movie not freeing or failing to free dynamically allocated heap memory, which can be exploited by an attacker to cause a denial of service...

CVE-2024-24155

Bento4 v1.5.1-628 contains a Memory leak on AP4Movie::AP4Movie, parsing tracks and added into mTracks list, but mp42aac cannot correctly delete when we got an no audio track found error. This vulnerability allows attackers to cause a Denial of Service DoS via a crafted mp4 file...