CVE-2023-29575

Bento4 v1.6.0-639 was discovered to contain an out-of-memory bug in the mp42aac component...

EUVD-2023-33116

Malicious code in bioql PyPI...

Linux Distros Unpatched Vulnerability : CVE-2022-40438

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - Buffer overflow vulnerability in function AP4MemoryByteStream::WritePartial in mp42aac in Bento4 v1.6.0-639, allows attackers to cause a denial of service via a...

Bento4 Component mp42aac DoS

The vulnerability of component mp42aac in the AP4BitReader::ReadBits function of the ISO-MP4 Bento4 reading and writing library is related to buffer overflow in dynamic memory. Exploiting this vulnerability could allow an attacker to cause a service failure...

CVE-2025-0753

A vulnerability classified as critical was found in Axiomatic Bento4 up to 1.6.0. This vulnerability affects the function AP4StdcFileByteStream::ReadPartial of the component mp42aac. The manipulation leads to heap-based buffer overflow. The attack can be initiated remotely. The exploit has been...

CVE-2025-0753

A vulnerability classified as critical was found in Axiomatic Bento4 up to 1.6.0. This vulnerability affects the function AP4StdcFileByteStream::ReadPartial of the component mp42aac. The manipulation leads to heap-based buffer overflow. The attack can be initiated remotely. The exploit has been...

CVE-2025-0753

A vulnerability classified as critical was found in Axiomatic Bento4 up to 1.6.0. This vulnerability affects the function AP4StdcFileByteStream::ReadPartial of the component mp42aac. The manipulation leads to heap-based buffer overflow. The attack can be initiated remotely. The exploit has been...

CVE-2025-0753 Axiomatic Bento4 mp42aac ReadPartial heap-based overflow

A vulnerability classified as critical was found in Axiomatic Bento4 up to 1.6.0. This vulnerability affects the function AP4StdcFileByteStream::ReadPartial of the component mp42aac. The manipulation leads to heap-based buffer overflow. The attack can be initiated remotely. The exploit has been...

CVE-2025-0753 Axiomatic Bento4 mp42aac ReadPartial heap-based overflow

A vulnerability classified as critical was found in Axiomatic Bento4 up to 1.6.0. This vulnerability affects the function AP4StdcFileByteStream::ReadPartial of the component mp42aac. The manipulation leads to heap-based buffer overflow. The attack can be initiated remotely. The exploit has been...

CVE-2025-0751 Axiomatic Bento4 mp42aac ReadBits heap-based overflow

A vulnerability classified as critical has been found in Axiomatic Bento4 up to 1.6.0. This affects the function AP4BitReader::ReadBits of the component mp42aac. The manipulation leads to heap-based buffer overflow. It is possible to initiate the attack remotely. The exploit has been disclosed to...

CVE-2025-0751

A vulnerability classified as critical has been found in Axiomatic Bento4 up to 1.6.0. This affects the function AP4BitReader::ReadBits of the component mp42aac. The manipulation leads to heap-based buffer overflow. It is possible to initiate the attack remotely. The exploit has been disclosed to...

CVE-2025-0751 Axiomatic Bento4 mp42aac ReadBits heap-based overflow

A vulnerability classified as critical has been found in Axiomatic Bento4 up to 1.6.0. This affects the function AP4BitReader::ReadBits of the component mp42aac. The manipulation leads to heap-based buffer overflow. It is possible to initiate the attack remotely. The exploit has been disclosed to...

CVE-2025-0751: Heap-based Buffer Overflow

A vulnerability classified as critical has been found in Axiomatic Bento4 up to 1.6.0. This affects the function AP4BitReader::ReadBits of the component mp42aac. The manipulation leads to heap-based buffer overflow. It is possible to initiate the attack remotely. The exploit has been disclosed to...

CVE-2025-0753: Heap-based Buffer Overflow

A vulnerability classified as critical was found in Axiomatic Bento4 up to 1.6.0. This vulnerability affects the function AP4StdcFileByteStream::ReadPartial of the component mp42aac. The manipulation leads to heap-based buffer overflow. The attack can be initiated remotely. The exploit has been...

PT-2025-4038

Name of the Vulnerable Software and Affected Versions Axiomatic Bento4 versions up to 1.6.0 Description A critical issue has been found in Axiomatic Bento4, affecting the function AP4 BitReader::ReadBits of the component mp42aac. The manipulation leads to a heap-based buffer overflow. It is...

PT-2025-4040 · Axiomatic · Axiomatic Bento4

Name of the Vulnerable Software and Affected Versions: Axiomatic Bento4 versions up to 1.6.0 Description: A critical vulnerability was found in Axiomatic Bento4, affecting the AP4 StdcFileByteStream::ReadPartial function of the mp42aac component. This vulnerability leads to a heap-based buffer...

CVE-2024-30806: Heap-based Buffer Overflow

An issue was discovered in Bento4 v1.6.0-641-2-g1529b83. There is a heap overflow in AP4Dec3Atom::AP4Dec3Atom at Ap4Dec3Atom.cpp, leading to a Denial of Service DoS, as demonstrated by mp42aac...

CVE-2024-30806

An issue was discovered in Bento4 v1.6.0-641-2-g1529b83. There is a heap overflow in AP4Dec3Atom::AP4Dec3Atom at Ap4Dec3Atom.cpp, leading to a Denial of Service DoS, as demonstrated by mp42aac...

CVE-2024-24155: Missing Release of Memory after Effective Lifetime

Bento4 v1.5.1-628 contains a Memory leak on AP4Movie::AP4Movie, parsing tracks and added into mTracks list, but mp42aac cannot correctly delete when we got an no audio track found error. This vulnerability allows attackers to cause a Denial of Service DoS via a crafted mp4 file...

CVE-2024-24155

CVE-2024-24155 affects Bento4 v1.5.1-628. The issue is a memory leak in the AP4_Movie(AP4_Movie) constructor during track parsing when adding tracks to the internal m_Tracks list. If an error occurs due to no audio track found, mp42aac cannot correctly delete the allocated memory, enabling a Deni...