CVE-2022-43038

Bento4 v1.6.0-639 was discovered to contain a heap overflow via the AP4BitReader::ReadCache function in mp42ts...

CVE-2022-40885

Bento4 v1.6.0-639 has a memory allocation issue that can cause denial of service...

CVE-2022-43033

An issue was discovered in Bento4 1.6.0-639. There is a bad free in the component AP4HdlrAtom::AP4HdlrAtom which allows attackers to cause a Denial of Service DoS via a crafted input...

CVE-2022-43037

An issue was discovered in Bento4 1.6.0-639. There is a memory leak in the function AP4File::ParseStream in /Core/Ap4File.cpp...

PT-2022-26717 · Bento4 · Bento4

Name of the Vulnerable Software and Affected Versions: Bento4 version 1.6.0-639 Description: An issue in the component AP4 HdlrAtom::AP4 HdlrAtom allows attackers to cause a Denial of Service DoS via a crafted input. This is due to a bad free, which can be exploited to disrupt the service...

CVE-2022-40885

Bento4 v1.6.0-639 has a memory allocation issue that can cause denial of service...

Bento4 缓冲区错误漏洞

Bento4 is an open source C library for reading and writing MP4 files. Bento4 v1.6.0-639 contains a denial of service vulnerability that stems from a boundary error in the AP4BitReader::ReadCache function in mp42ts when handling untrusted input. An attacker could exploit the vulnerability to launc...

CVE-2022-43037

An issue was discovered in Bento4 1.6.0-639. There is a memory leak in the function AP4File::ParseStream in /Core/Ap4File.cpp...

CVE-2022-43035

An issue was discovered in Bento4 v1.6.0-639. There is a heap-buffer-overflow in AP4Dec3Atom::AP4Dec3Atom at Ap4Dec3Atom.cpp, leading to a Denial of Service DoS, as demonstrated by mp42aac...

Bento4 资源管理错误漏洞

Bento4 is an open source C library for reading and writing MP4 files. version v1.6.0-639 of Bento4 suffers from a denial of service vulnerability that stems from a boundary error in the component AP4HdlrAtom::AP4HdlrAtom when handling untrusted input. An attacker could exploit the vulnerability t...

CVE-2022-43032

An issue was discovered in Bento4 v1.6.0-639. There is a memory leak in AP4DescriptorFactory::CreateDescriptorFromStream in Core/Ap4DescriptorFactory.cpp, as demonstrated by mp42aac...

CVE-2022-43034

An issue was discovered in Bento4 v1.6.0-639. There is a heap buffer overflow vulnerability in the AP4BitReader::SkipBitsunsigned int function in mp42ts...

CVE-2022-43037

Bento4 1.6.0-639 is affected by a memory leak in the parser path: AP4_File::ParseStream (file Core/Ap4File.cpp). The CVE notes a memory leak in this function, indicating potential resource exhaustion for affected deployments. The connected sources consistently reference Bento4 as the vulnerable c...

Bento4 安全漏洞

Bento4 is an open source C library for reading and writing MP4 files.Bento4 v1.6.0-639 contains a denial of service vulnerability that originates in AP4DescriptorFactory:.CreateDescriptorFromStream in Core/Ap4DescriptorFactory.cpp: CreateDescriptorFromStream is not freed or fails to free...

CVE-2022-40884

CVE-2022-40884 affects Bento4 1.6.0, where memory leaks via the mp4fragment component are reported. The NVD entry assigns CVSS v3.1 base score 5.5 (Medium) with LOCAL attack vector, requiring user interaction and no privileges, and indicates availability impact HIGH. Public references in connecte...

Bento4 安全漏洞

Bento4 is an open source C++ library for reading and writing MP4 files. A security vulnerability exists in Bento4 version 1.6.0, which stems from a memory leak discovered via mp4 clips...

CVE-2022-43032

An issue was discovered in Bento4 v1.6.0-639. There is a memory leak in AP4DescriptorFactory::CreateDescriptorFromStream in Core/Ap4DescriptorFactory.cpp, as demonstrated by mp42aac...

PT-2022-26720 · Bento4 · Bento4

Name of the Vulnerable Software and Affected Versions: Bento4 version 1.6.0-639 Description: An issue was discovered in the function AP4 File::ParseStream in /Core/Ap4File.cpp, which results in a memory leak. Recommendations: For Bento4 version 1.6.0-639, consider disabling the AP4...

CVE-2022-43038

CVE-2022-43038 affects Bento4 v1.6.0-639, where a heap overflow in AP4_BitReader::ReadCache() inside mp42ts is described. Attack surface is limited to Bento4’s MP4 processing code; public descriptions/refs consistently indicate a denial-of-service impact. Some sources (PT-2022-26721) note a tempo...

CVE-2022-43032

An issue was discovered in Bento4 v1.6.0-639. There is a memory leak in AP4DescriptorFactory::CreateDescriptorFromStream in Core/Ap4DescriptorFactory.cpp, as demonstrated by mp42aac...