61 matches found
EUVD-2025-4596
Malicious code in bioql PyPI...
EUVD-2022-44616
Malicious code in bioql PyPI...
EUVD-2022-44140
Malicious code in bioql PyPI...
EUVD-2025-4598
Malicious code in bioql PyPI...
EUVD-2022-43022
Malicious code in bioql PyPI...
Linux Distros Unpatched Vulnerability : CVE-2022-41423
The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - Bento4 v1.6.0-639 was discovered to contain a segmentation violation in the mp4fragment component. CVE-2022-41423 Note that Nessus relies on the presence of the...
Linux Distros Unpatched Vulnerability : CVE-2022-40884
The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - Bento4 1.6.0 has memory leaks via the mp4fragment. CVE-2022-40884 Note that Nessus relies on the presence of the package as reported by the vendor. %NASLMINLEVE...
Linux Distros Unpatched Vulnerability : CVE-2022-3663
The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - A vulnerability was found in Axiomatic Bento4. It has been rated as problematic. This issue affects the function AP4StsdAtom of the file Ap4StsdAtom.cpp of the...
CVE-2022-41423
Bento4 v1.6.0-639 was discovered to contain a segmentation violation in the mp4fragment component...
CVE-2022-40884
Bento4 1.6.0 has memory leaks via the mp4fragment...
CVE-2025-25942
An issue in Bento4 v1.6.0-641 allows an attacker to obtain sensitive information via the the mp4fragment tool when processing invalid files. Specifically, memory allocated in SampleArray::SampleArray in Mp4Fragment.cpp is not properly released...
CVE-2025-25942
An issue in Bento4 v1.6.0-641 allows an attacker to obtain sensitive information via the the mp4fragment tool when processing invalid files. Specifically, memory allocated in SampleArray::SampleArray in Mp4Fragment.cpp is not properly released...
CVE-2025-25944: Improper Control of Generation of Code
Buffer Overflow vulnerability in Bento4 v.1.6.0-641 allows a local attacker to execute arbitrary code via the Ap4RtpAtom.cpp, specifically in AP4RtpAtom::AP4RtpAtom, during the execution of mp4fragment with a crafted MP4 input file...
CVE-2025-25942
An issue in Bento4 v1.6.0-641 allows an attacker to obtain sensitive information via the the mp4fragment tool when processing invalid files. Specifically, memory allocated in SampleArray::SampleArray in Mp4Fragment.cpp is not properly released...
PT-2025-7582
Name of the Vulnerable Software and Affected Versions Bento4 version 1.6.0-641 Description An issue in Bento4 allows an attacker to obtain sensitive information via the mp4fragment tool when processing invalid files. Specifically, memory allocated in SampleArray::SampleArray in Mp4Fragment.cpp is...
CVE-2025-25942
An issue in Bento4 v1.6.0-641 allows an attacker to obtain sensitive information via the the mp4fragment tool when processing invalid files. Specifically, memory allocated in SampleArray::SampleArray in Mp4Fragment.cpp is not properly released...
Bento4 security vulnerabilities
Bento4 is an open source C++ library for reading and writing MP4 files from Axiomatic Systems. A security vulnerability exists in Bento4 version v1.6.0-641, which originates from an unfilled memory in Mp4Fragment.cpp, leading to an information leak...
CVE-2025-25942
The Bento4 C++ library (version v1.6.0-641 ) is vulnerable to an information leak via the mp4fragment tool. The root cause is a memory management flaw in Mp4Fragment.cpp, where memory allocated in SampleArray::SampleArray is not properly released when the tool processes invalid files. This oversi...
CVE-2025-25942
An issue in Bento4 v1.6.0-641 allows an attacker to obtain sensitive information via the the mp4fragment tool when processing invalid files. Specifically, memory allocated in SampleArray::SampleArray in Mp4Fragment.cpp is not properly released...
CVE-2025-25942: Exposure of Sensitive Information to an Unauthorized Actor
An issue in Bento4 v1.6.0-641 allows an attacker to obtain sensitive information via the the mp4fragment tool when processing invalid files. Specifically, memory allocated in SampleArray::SampleArray in Mp4Fragment.cpp is not properly released...