37 matches found
CVE-2023-38666
Bento4 v1.6.0-639 was discovered to contain a segmentation violation via the AP4Processor::ProcessFragments function in mp4encrypt...
CVE-2023-38666
CVE-2023-38666 affects Bento4 v1.6.0-639, where a segmentation fault occurs in the AP4_Processor::ProcessFragments function within mp4encrypt. The vulnerability is described as a denial-of-service risk. PT-2023-26539 recommends temporarily disabling AP4 Processor::ProcessFragments as a workaround...
CVE-2023-29575
Bento4 v1.6.0-639 was discovered to contain an out-of-memory bug in the mp42aac component...
Design/Logic Flaw
Bento4 v1.6.0-639 was discovered to contain an out-of-memory bug in the mp42aac component...
Bento4 安全漏洞
Bento4 is an open source C++ library for reading and writing MP4 files. A security vulnerability exists in Bento4 version v1.6.0-639, which stems from an out-of-memory issue found in the mp42aac component...
CVE-2023-29573
Bento4 v1.6.0-639 was discovered to contain an out-of-memory bug in the mp4info component...
CVE-2023-29574
Bento4 v1.6.0-639 was discovered to contain an out-of-memory bug in the mp42avc component...
CVE-2023-29574
Bento4 v1.6.0-639 was discovered to contain an out-of-memory bug in the mp42avc component...
CVE-2023-29576
Bento4 v1.6.0-639 was discovered to contain a segmentation violation via the AP4TrunAtom::SetDataOffsetint function in Ap4TrunAtom.h...
CVE-2023-29576
CVE-2023-29576 affects Bento4 v1.6.0-639. The vulnerability is a segmentation violation in AP4_TrunAtom::SetDataOffset(int) in Ap4TrunAtom.h, leading to denial of service. Sources consistently describe Bento4 v1.6.0-639 as affected and confirm the issue is a crash/DoS vector rather than remote co...
CVE-2023-29576
Bento4 v1.6.0-639 was discovered to contain a segmentation violation via the AP4TrunAtom::SetDataOffsetint function in Ap4TrunAtom.h...
CVE-2022-43035
An issue was discovered in Bento4 v1.6.0-639. There is a heap-buffer-overflow in AP4Dec3Atom::AP4Dec3Atom at Ap4Dec3Atom.cpp, leading to a Denial of Service DoS, as demonstrated by mp42aac...
Heap overflow
An issue was discovered in Bento4 v1.6.0-639. There is a heap-buffer-overflow in AP4Dec3Atom::AP4Dec3Atom at Ap4Dec3Atom.cpp, leading to a Denial of Service DoS, as demonstrated by mp42aac...
Memory corruption
An issue was discovered in Bento4 v1.6.0-639. There is a memory leak in AP4DescriptorFactory::CreateDescriptorFromStream in Core/Ap4DescriptorFactory.cpp, as demonstrated by mp42aac...
CVE-2022-40885
Bento4 v1.6.0-639 has a memory allocation issue that can cause denial of service...
CVE-2022-43032
CVE-2022-43032 affects Bento4 v1.6.0-639. The issue is a memory leak in AP4_DescriptorFactory::CreateDescriptorFromStream (Core/Ap4DescriptorFactory.cpp) that can lead to denial of service. Exploitation details or in‑the‑wild status are not provided in the supplied documents. No patch/version fix...
CVE-2022-40885
Bento4 v1.6.0-639 has a memory allocation issue that can cause denial of service...
Bento4 AP4_Processor::Process Denial of Service Vulnerability
Bento4 is an open source C library for reading and writing MP4 files. version v1.6.0-639 of Bento4 contains a denial of service vulnerability that stems from a memory leak in the AP4Processor::Process function in the mp4encrypt binary. An attacker could exploit the vulnerability to cause a denial...