135 matches found
EUVD-2020-11620
Malware in sbrugna...
EUVD-2020-11616
Malware in sbrugna...
Linux Distros Unpatched Vulnerability : CVE-2018-5253
The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - The AP4FtypAtom class in Core/Ap4FtypAtom.cpp in Bento4 1.5.1.0 has an Infinite loop via a crafted MP4 file that triggers size mishandling. CVE-2018-5253 Note...
Linux Distros Unpatched Vulnerability : CVE-2018-20407
The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - An issue was discovered in Bento4 1.5.1-627. There is a memory leak in AP4DescriptorFactory::CreateDescriptorFromStream in Core/Ap4DescriptorFactory.cpp, as...
Linux Distros Unpatched Vulnerability : CVE-2022-41425
The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - Bento4 v1.6.0-639 was discovered to contain a segmentation violation via the AP4Processor::ProcessFragments function in mp4decrypt. CVE-2022-41425 Note that...
Linux Distros Unpatched Vulnerability : CVE-2022-31285
The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - An issue was discovered in Bento4 1.2. The allocator is out of memory in /Source/C++/Core/Ap4Array.h. CVE-2022-31285 Note that Nessus relies on the presence of...
CVE-2025-54410 vulnerabilities
Vulnerabilities for packages: undock, kpt, lazydocker, promxy, bento, docker-credential-gcr, cluster-api-helm-controller, crossplane, openbao, skaffold, opentelemetry-operator, rancher-machine, prometheus, portieris, newrelic-infrastructure-agent, k3s, bom, xeol, helm-mapkubeapis, falcoctl,...
GHSA-4VQ8-7JFC-9CVP vulnerabilities
Vulnerabilities for packages: amazon-ecs-agent-fips, helm-set-status, openbao-fips, beats, falcoctl-fips, skaffold-fips, gatekeeper, traefik, cluster-api-fips, gitlab-rails-ce-fips, helm-mapkubeapis, promxy-fips, docker-credential-gcr-fips, lazydocker, kpt, cluster-api-helm-controller, crossplane...
CVE-2025-54410 vulnerabilities
Vulnerabilities for packages: amazon-ecs-agent-fips, helm-set-status, openbao-fips, beats, falcoctl-fips, skaffold-fips, gatekeeper, traefik, cluster-api-fips, gitlab-rails-ce-fips, helm-mapkubeapis, promxy-fips, docker-credential-gcr-fips, lazydocker, kpt, cluster-api-helm-controller, crossplane...
CVE-2022-40885
Bento4 v1.6.0-639 has a memory allocation issue that can cause denial of service...
CVE-2020-19719
A buffer overflow vulnerability in Ap4ElstAtom.cpp of Bento 1.5.1-628 leads to a denial of service DOS...
CVE-2020-19721
A heap buffer overflow vulnerability in Ap4TrunAtom.cpp of Bento 1.5.1-628 may lead to an out-of-bounds write while running mp42aac, leading to system crashes and a denial of service DOS...
CVE-2020-19718
An unhandled memory allocation failure in Core/Ap4Atom.cpp of Bento 1.5.1-628 causes a NULL pointer dereference, leading to a denial of service DOS...
CVE-2020-19722
An unhandled memory allocation failure in Core/Ap4Atom.cpp of Bento 1.5.1-628 causes a direct copy to NULL pointer dereference, leading to a denial of service DOS...
PYSEC-2025-32
BentoML is a Python library for building online serving systems optimized for AI apps and model inference. Prior to 1.4.8, there was an insecure deserialization in BentoML's runner server. By setting specific headers and parameters in the POST request, it is possible to execute any unauthorized...
PT-2025-3460 · Bento4 · Bento4
Name of the Vulnerable Software and Affected Versions: Bento4 mp42avc version 3bdc891602d19789b8e8626e4a3e613a937b4d35 Description: The issue allows a local attacker to execute arbitrary code via the AP4 MemoryByteStream::WritePartial function. This is a buffer overflow vulnerability...
CVE-2024-31003
Buffer Overflow vulnerability in Bento4 Bento v.1.6.0-641 allows a remote attacker to execute arbitrary code via the AP4MemoryByteStream::WritePartial at Ap4ByteStream.cpp...
CVE-2024-31004
An issue in Bento4 Bento v.1.6.0-641 allows a remote attacker to execute arbitrary code via the Ap4StsdAtom.cpp,AP4StsdAtom::AP4StsdAtom,mp4fragment...
Malicious code in @dle-clo-bento-component/dist (npm)
--- -= Per source details. Do not edit below this line.=- Source: ossf-package-analysis a652e8cb279a3db5d1420008c3f3fc8c11aab4463f7ed61925ca409f18066b19 The OpenSSF Package Analysis project identified '@dle-clo-bento-component/dist' @ 13.0.0 npm as malicious. It is considered malicious because: -...
