CVE-2024-30809

The open-source C++ library Bento4 (specifically version v1.6.0-641-2-g1529b83 ) is vulnerable to a heap-use-after-free in the Ap4Sample.h file within the AP4_Sample::GetOffset() const method. This flaw can lead to a Denial of Service (DoS) , as demonstrated by mp42ts. As a temporary workaround, ...