CVE-2022-41425

Bento4 v1.6.0-639 contains a segmentation fault in the mp4decrypt path (AP4_Processor::ProcessFragments), exposing a denial-of-service condition. This CVE (CVE-2022-41425) is documented across multiple sources as a vulnerability in Bento4’s MP4 processing; exploitation status and concrete patch/r...

CVE-2022-41425

Bento4 v1.6.0-639 was discovered to contain a segmentation violation via the AP4Processor::ProcessFragments function in mp4decrypt...

CVE-2022-41423

CVE-2022-41423 affects Bento4 v1.6.0-639 with a segmentation violation in the mp4fragment component. The issue is documented across multiple sources as a vulnerable condition due to the segmentation fault in mp4fragment. The public description specifies Bento4 v1.6.0-639 as affected; no explicit ...

CVE-2022-41423

Bento4 v1.6.0-639 was discovered to contain a segmentation violation in the mp4fragment component...

CVE-2022-41423

Bento4 v1.6.0-639 was discovered to contain a segmentation violation in the mp4fragment component...

CVE-2022-40922

A vulnerability in the LIEF::MachO::BinaryParser::initandparse function of LIEF v0.12.1 allows attackers to cause a denial of service DOS through a segmentation fault via a crafted MachO file...

Design/Logic Flaw

A vulnerability in the LIEF::MachO::BinaryParser::initandparse function of LIEF v0.12.1 allows attackers to cause a denial of service DOS through a segmentation fault via a crafted MachO file...

PYSEC-2022-43138

A vulnerability in the LIEF::MachO::BinaryParser::initandparse function of LIEF v0.12.1 allows attackers to cause a denial of service DOS through a segmentation fault via a crafted MachO file...

PYSEC-2022-43138

A vulnerability in the LIEF::MachO::BinaryParser::initandparse function of LIEF v0.12.1 allows attackers to cause a denial of service DOS through a segmentation fault via a crafted MachO file...

CVE-2022-40922

A vulnerability in the LIEF::MachO::BinaryParser::initandparse function of LIEF v0.12.1 allows attackers to cause a denial of service DOS through a segmentation fault via a crafted MachO file...

CVE-2022-40922

A vulnerability in the LIEF::MachO::BinaryParser::initandparse function of LIEF v0.12.1 allows attackers to cause a denial of service DOS through a segmentation fault via a crafted MachO file...

CVE-2022-40922

CVE-2022-40922 concerns LIEF v0.12.1, where the LIEF::MachO::BinaryParser::init_and_parse function is vulnerable to denial of service via a crafted Mach-O file, caused by improper handling of error messages in init_and_parse. Public sources consistently describe a DOS achievable through a segment...

CVE-2022-40922

A vulnerability in the LIEF::MachO::BinaryParser::initandparse function of LIEF v0.12.1 allows attackers to cause a denial of service DOS through a segmentation fault via a crafted MachO file...

Bento4 安全漏洞

Bento4 is an open source C library for reading and writing MP4 files. Bento4 v1.6.0-639 contains a denial of service vulnerability that stems from a segmentation violation in the AP4Processor::ProcessFragments method of the mp4decrypt component. An attacker could exploit the vulnerability to caus...

PT-2022-25859 · Bento4 · Bento4

Name of the Vulnerable Software and Affected Versions: Bento4 version 1.6.0-639 Description: A segmentation violation was discovered in the AP4 Processor::ProcessFragments function in mp4decrypt, which is part of Bento4. Recommendations: For Bento4 version 1.6.0-639, consider avoiding the use of...

PT-2022-25857 · Bento4 · Bento4

Name of the Vulnerable Software and Affected Versions: Bento4 version 1.6.0-639 Description: A segmentation violation was discovered in the mp4fragment component of Bento4. Recommendations: For version 1.6.0-639, at the moment, there is no information about a newer version that contains a fix for...

Bento4 安全漏洞

Bento4 is an open source C++ library for reading and writing MP4 files. A security vulnerability exists in the Bento4 v1.6.0-639 release that stems from a segmentation violation in mp4fragment...

LIEF vulnerable to denial of service through segmentation fault

A vulnerability in the LIEF::MachO::SegmentCommand::virtualaddress function of LIEF v0.12.1 allows attackers to cause a denial of service DOS through a segmentation fault via a crafted MachO file. A patch is available at commit number 24935f654f6df700a9a062298258b9485f584502...

Design/Logic Flaw

A vulnerability in the LIEF::MachO::SegmentCommand::virtualaddress function of LIEF v0.12.1 allows attackers to cause a denial of service DOS through a segmentation fault via a crafted MachO file...

CVE-2022-40923

The CVE-2022-40923 entry concerns LIEF v0.12.1, where the LIEF::MachO::SegmentCommand::virtual_address function can trigger a denial of service via a crafted Mach-O file, caused by a segmentation fault. This is a concrete vulnerability affecting the Mach-O handling code path, with an impact on av...