Bento4 资源管理错误漏洞

Bento4 is an open source C++ library for reading and writing MP4 files. Bento4 suffers from a resource management error vulnerability that stems from the presence of a memory reuse after release issue...

Bento4 缓冲区错误漏洞

Bento4 is an open source C++ library for reading and writing MP4 files. A security vulnerability exists in Axiomatic Bento4 that stems from the presence of a heap-based buffer overflow issue...

CVE-2022-3664 Axiomatic Bento4 avcinfo Ap4BitStream.cpp WriteBytes heap-based overflow

A vulnerability classified as critical has been found in Axiomatic Bento4. Affected is the function AP4BitStream::WriteBytes of the file Ap4BitStream.cpp of the component avcinfo. The manipulation leads to heap-based buffer overflow. It is possible to launch the attack remotely. The exploit has...

CVE-2022-3670

The CVE-2022-3670 entry concerns Axiomatic Bento4, specifically the mp42hevc component’s WriteSample function. The vulnerability is a heap-based buffer overflow, enabling a remote attack when exploited. The description notes that the exploit has been disclosed publicly (VDB-212010), indicating pu...

Bento4 缓冲区错误漏洞

Bento4 is an open source C++ library for reading and writing MP4 files. A security vulnerability exists in Bento4 that stems from the presence of a heap-based buffer overflow problem...

Bento4 安全漏洞

Bento4 is an open source C++ library for reading and writing MP4 files. A security vulnerability exists in Bento4. An attacker exploited the vulnerability to cause a memory leak...

CVE-2022-3668 Axiomatic Bento4 mp4edit CreateAtomFromStream memory leak

A vulnerability has been found in Axiomatic Bento4 and classified as problematic. This vulnerability affects the function AP4AtomFactory::CreateAtomFromStream of the component mp4edit. The manipulation leads to memory leak. The attack can be initiated remotely. The exploit has been disclosed to t...

CVE-2022-3667 Axiomatic Bento4 mp42aac Ap4ByteStream.cpp WritePartial heap-based overflow

A vulnerability, which was classified as critical, was found in Axiomatic Bento4. This affects the function AP4MemoryByteStream::WritePartial of the file Ap4ByteStream.cpp of the component mp42aac. The manipulation leads to heap-based buffer overflow. It is possible to initiate the attack remotel...

CVE-2022-3665

CVE-2022-3665 concerns Axiomatic Bento4, specifically the AvcInfo.cpp component of avcinfo. The issue is a heap-based buffer overflow in an unknown functionality path, with remote exploitation possible. The exploit has been disclosed publicly (VDB-212005), and multiple sources cite a high-severit...

CVE-2022-3663 Axiomatic Bento4 MP4fragment Ap4StsdAtom.cpp AP4_StsdAtom null pointer dereference

A vulnerability was found in Axiomatic Bento4. It has been rated as problematic. This issue affects the function AP4StsdAtom of the file Ap4StsdAtom.cpp of the component MP4fragment. The manipulation leads to null pointer dereference. The attack may be initiated remotely. The exploit has been...

CVE-2022-3670 Axiomatic Bento4 mp42hevc WriteSample heap-based overflow

A vulnerability was found in Axiomatic Bento4. It has been classified as critical. Affected is the function WriteSample of the component mp42hevc. The manipulation leads to heap-based buffer overflow. It is possible to launch the attack remotely. The exploit has been disclosed to the public and m...

CVE-2022-3665 Axiomatic Bento4 avcinfo AvcInfo.cpp heap-based overflow

A vulnerability classified as critical was found in Axiomatic Bento4. Affected by this vulnerability is an unknown functionality of the file AvcInfo.cpp of the component avcinfo. The manipulation leads to heap-based buffer overflow. The attack can be launched remotely. The exploit has been...

Bento4 代码问题漏洞

Bento4 is an open source C++ library for reading and writing MP4 files. A security vulnerability exists in Axiomatic Bento4. An attacker exploited the vulnerability to cause a null pointer dereference...

CVE-2022-3666

CVE-2022-3666 affects Axiomatic Bento4, specifically the mp42ts component and the AP4_LinearReader::Advance function in Ap4LinearReader.cpp. The vulnerability is a use-after-free that could be exploited remotely; the exploit has been publicly disclosed (VDB-212006). Multiple sources corroborate a...

CVE-2022-3662 Axiomatic Bento4 mp42hls Ap4Sample.h GetOffset use after free

A vulnerability was found in Axiomatic Bento4. It has been declared as critical. This vulnerability affects the function GetOffset of the file Ap4Sample.h of the component mp42hls. The manipulation leads to use after free. The attack can be initiated remotely. The exploit has been disclosed to th...

CVE-2022-3662 Axiomatic Bento4 mp42hls Ap4Sample.h GetOffset use after free

A vulnerability was found in Axiomatic Bento4. It has been declared as critical. This vulnerability affects the function GetOffset of the file Ap4Sample.h of the component mp42hls. The manipulation leads to use after free. The attack can be initiated remotely. The exploit has been disclosed to th...

CVE-2022-3670 Axiomatic Bento4 mp42hevc WriteSample heap-based overflow

A vulnerability was found in Axiomatic Bento4. It has been classified as critical. Affected is the function WriteSample of the component mp42hevc. The manipulation leads to heap-based buffer overflow. It is possible to launch the attack remotely. The exploit has been disclosed to the public and m...

Bento4 AP4_DescriptorFactory::CreateDescriptorFromStream function denial of service vulnerability

Bento4 is an open source C library for reading and writing MP4 files.Bento4 v1.6.0-639 contains a denial of service vulnerability that originates in AP4DescriptorFactory:.CreateDescriptorFromStream in Core/Ap4DescriptorFactory.cpp: CreateDescriptorFromStream is not freed or fails to free...

Bento4 AP4_BitReader::ReadCache function denial of service vulnerability

Bento4 is an open source C library for reading and writing MP4 files. Bento4 v1.6.0-639 contains a denial of service vulnerability that stems from a boundary error in the AP4BitReader::ReadCache function in mp42ts when handling untrusted input. An attacker could exploit the vulnerability to launc...

Bento4 AP4_BitReader::SkipBits function denial of service vulnerability

Bento4 is an open source C library for reading and writing MP4 files. Bento4 v1.6.0-639 contains a denial of service vulnerability that stems from a boundary error in the AP4BitReader::SkipBitsunsigned int function in mp42ts when handling untrusted input. An attacker could exploit the vulnerabili...