CVE-2018-5253

The AP4FtypAtom class in Core/Ap4FtypAtom.cpp in Bento4 1.5.1.0 has an Infinite loop via a crafted MP4 file that triggers size mishandling...

CVE-2018-5253

The provided CVE-2018-5253 entries (NVD/Red Hat/Ubuntu/CNVD/OSV) consistently identify Bento4 1.5.1.0’s AP4_FtypAtom.cpp as vulnerable to an infinite loop caused by crafted MP4 files triggering size mishandling. The issue is in a C++ library used for reading/writing ISO-MP4; the exact root cause ...