Bento4 Buffer Overflow Vulnerability

Bento4 is an open source C++ library for reading and writing MP4 files. A buffer overflow vulnerability exists in the AP4Mp4AudioDsiParser::ReadBits of the Codecs/Ap4Mp4AudioInfo.cpp file in Bento4 version 1.5.1-624. An attacker can exploit this vulnerability to cause heap buffer out-of-bounds...

CVE-2018-14589: Out-of-bounds Read

An issue has been discovered in Bento4 1.5.1-624. AP4Mp4AudioDsiParser::ReadBits in Codecs/Ap4Mp4AudioInfo.cpp has a heap-based buffer over-read...