1905 matches found
CVE-2022-43038
Bento4 v1.6.0-639 was discovered to contain a heap overflow via the AP4BitReader::ReadCache function in mp42ts...
CVE-2022-43032
CVE-2022-43032 affects Bento4 v1.6.0-639. The issue is a memory leak in AP4_DescriptorFactory::CreateDescriptorFromStream (Core/Ap4DescriptorFactory.cpp) that can lead to denial of service. Exploitation details or in‑the‑wild status are not provided in the supplied documents. No patch/version fix...
PT-2022-26718 · Bento4 · Bento4
Name of the Vulnerable Software and Affected Versions: Bento4 version 1.6.0-639 Description: An issue was discovered in the AP4 BitReader::SkipBitsunsigned int function in mp42ts, which is a heap buffer overflow. Recommendations: For Bento4 version 1.6.0-639, consider disabling the AP4...
CVE-2022-43038
Bento4 v1.6.0-639 was discovered to contain a heap overflow via the AP4BitReader::ReadCache function in mp42ts...
Bento4 安全漏洞
Bento4 is an open source C++ library for reading and writing MP4 files. A security vulnerability exists in Bento4 v1.6.0-639, which originates from a memory leak in function AP4File::ParseStream in /Core/Ap4File.cpp...
CVE-2022-43034
CVE-2022-43034 affects Bento4 version 1.6.0-639, where a heap buffer overflow exists in the AP4_BitReader::SkipBits(unsigned int) function within mp42ts. The vulnerability stems from a boundary/error in SkipBits handling untrusted input and can impact availability (CVSS: AV:N/AC:L/PR:N/UI:R/S:U/C...
PT-2022-25606 · Bento4 · Bento4
Name of the Vulnerable Software and Affected Versions: Bento4 version 1.6.0 Description: The issue is related to memory leaks in Bento4 via the mp4fragment. Recommendations: For Bento4 version 1.6.0, at the moment, there is no information about a newer version that contains a fix for this...
CVE-2022-43035
An issue was discovered in Bento4 v1.6.0-639. There is a heap-buffer-overflow in AP4Dec3Atom::AP4Dec3Atom at Ap4Dec3Atom.cpp, leading to a Denial of Service DoS, as demonstrated by mp42aac...
CVE-2022-40884
Bento4 1.6.0 has memory leaks via the mp4fragment...
PT-2022-26716 · Bento4 · Bento4
Name of the Vulnerable Software and Affected Versions: Bento4 version 1.6.0-639 Description: A memory leak issue was discovered in the AP4 DescriptorFactory::CreateDescriptorFromStream function located in Core/Ap4DescriptorFactory.cpp. This issue is demonstrated by the mp42aac tool...
CVE-2022-43034
An issue was discovered in Bento4 v1.6.0-639. There is a heap buffer overflow vulnerability in the AP4BitReader::SkipBitsunsigned int function in mp42ts...
CVE-2022-40885
CVE-2022-40885 affects Bento4 v1.6.0-639 and describes a memory allocation issue that can lead to denial of service. The NVD entry lists a MEDIUM base score (5.5) with local, low-attack-vector/access complexity, requiring user interaction, and HIGH impact on availability. Connected documents corr...
CVE-2022-43033
An issue was discovered in Bento4 1.6.0-639. There is a bad free in the component AP4HdlrAtom::AP4HdlrAtom which allows attackers to cause a Denial of Service DoS via a crafted input...
Bento4 缓冲区错误漏洞
Bento4 is an open source C library for reading and writing MP4 files. version v1.6.0-639 of Bento4 suffers from a denial of service vulnerability, which stems from a boundary error in AP4Dec3Atom::AP4Dec3Atom in Ap4Dec3Atom.cpp when handling untrusted input. An attacker could exploit the...
CVE-2022-40884
Bento4 1.6.0 has memory leaks via the mp4fragment...
PT-2022-25607 · Bento4 · Bento4
Name of the Vulnerable Software and Affected Versions: Bento4 version 1.6.0-639 Description: The issue is related to a memory allocation problem that can lead to denial of service. Recommendations: For Bento4 version 1.6.0-639, at the moment, there is no information about a newer version that...
Bento4 缓冲区错误漏洞
Bento4 is an open source C library for reading and writing MP4 files. Bento4 v1.6.0-639 contains a denial of service vulnerability that stems from a boundary error in the AP4BitReader::SkipBitsunsigned int function in mp42ts when handling untrusted input. An attacker could exploit the vulnerabili...
PT-2022-26719 · Bento4 · Bento4
Name of the Vulnerable Software and Affected Versions: Bento4 version 1.6.0-639 Description: An issue was discovered in Bento4, leading to a Denial of Service DoS. The issue is caused by a heap-buffer-overflow in AP4 Dec3Atom::AP4 Dec3Atom at Ap4Dec3Atom.cpp, as demonstrated by mp42aac...