CVE-2022-41428

Bento4 v1.6.0-639 was discovered to contain a heap overflow via the AP4BitReader::ReadBits function in mp4mux...

Design/Logic Flaw

Bento4 v1.6.0-639 was discovered to contain a heap overflow via the AP4BitReader::ReadBit function in mp4mux...

UBUNTU-CVE-2022-41423

Bento4 v1.6.0-639 was discovered to contain a segmentation violation in the mp4fragment component...

CVE-2022-41429

Bento4 v1.6.0-639 was discovered to contain a heap overflow via the AP4Atom::TypeFromString function in mp4tag...

Bento4 缓冲区错误漏洞

Bento4 is an open source C++ library for reading and writing MP4 files. A buffer overflow vulnerability exists in Bento4 version v1.6.0-639, which stems from a heap overflow in the AP4BitReader::ReadBits function of the mp4mux component. An attacker could exploit the vulnerability to affect the...

PT-2022-25864 · Bento4 · Bento4

Name of the Vulnerable Software and Affected Versions: Bento4 version 1.6.0-639 Description: A heap overflow issue was discovered in the AP4 BitReader::ReadBit function within the mp4mux component of Bento4. This issue can be exploited via the AP4 BitReader::ReadBit function. Recommendations: For...

PT-2022-25863 · Bento4 · Bento4

Name of the Vulnerable Software and Affected Versions: Bento4 version 1.6.0-639 Description: A heap overflow issue was discovered in the AP4 Atom::TypeFromString function within the mp4tag component. Recommendations: For Bento4 version 1.6.0-639, consider avoiding the use of the AP4...

PT-2022-25858 · Bento4 · Bento4

Name of the Vulnerable Software and Affected Versions: Bento4 version 1.6.0-639 Description: A memory leak was discovered in Bento4 via the AP4 SttsAtom::Create function in mp42hls. Recommendations: For version 1.6.0-639, consider restricting the use of the AP4 SttsAtom::Create function until a...

PT-2022-23461 · Heartex · Label Studio Community Edition

Name of the Vulnerable Software and Affected Versions: Heartex - Label Studio Community Edition versions 1.5.0 and earlier Description: A Server Side Request Forgery SSRF in the Data Import module allows an authenticated user to access arbitrary files on the system. Self-registration is enabled b...

Bento4 安全漏洞

Bento4 is an open source C++ library for reading and writing MP4 files. A security vulnerability exists in Bento4 version v1.6.0-639, which stems from a memory leak in the AP4AvcFrameParser::Feed method of the mp4mux component...

PT-2022-25855 · Bento4 · Bento4

Name of the Vulnerable Software and Affected Versions: Bento4 version 1.6.0-639 Description: A memory leak was discovered in Bento4 via the AP4 Processor::Process function in the mp4encrypt binary. Recommendations: For version 1.6.0-639, consider restricting the use of the AP4 Processor::Process...

PT-2022-25860 · Bento4 · Bento4

Name of the Vulnerable Software and Affected Versions: Bento4 version 1.6.0-639 Description: A memory leak was discovered in the AP4 AtomFactory::CreateAtomFromStream function in mp4split. Recommendations: For version 1.6.0-639, consider restricting the use of the AP4...

PT-2022-25862 · Bento4 · Bento4

Name of the Vulnerable Software and Affected Versions: Bento4 version 1.6.0-639 Description: A heap overflow issue was discovered in the AP4 BitReader::ReadBits function within the mp4mux component of Bento4. Recommendations: For Bento4 version 1.6.0-639, consider restricting access to the mp4mux...

Bento4 安全漏洞

Bento4 is an open source C++ library for reading and writing MP4 files. A security vulnerability exists in the Bento4 v1.6.0-639 release that stems from a segmentation violation in mp4fragment...

PT-2022-25857 · Bento4 · Bento4

Name of the Vulnerable Software and Affected Versions: Bento4 version 1.6.0-639 Description: A segmentation violation was discovered in the mp4fragment component of Bento4. Recommendations: For version 1.6.0-639, at the moment, there is no information about a newer version that contains a fix for...

PT-2022-25859 · Bento4 · Bento4

Name of the Vulnerable Software and Affected Versions: Bento4 version 1.6.0-639 Description: A segmentation violation was discovered in the AP4 Processor::ProcessFragments function in mp4decrypt, which is part of Bento4. Recommendations: For Bento4 version 1.6.0-639, consider avoiding the use of...

PT-2022-25861 · Bento4 · Bento4

Name of the Vulnerable Software and Affected Versions: Bento4 version 1.6.0-639 Description: A memory leak was discovered in the AP4 AvcFrameParser::Feed function in mp4mux. Recommendations: For Bento4 version 1.6.0-639, consider updating to a newer version that contains a fix for this issue,...

Bento4 安全漏洞

Bento4 is an open source C++ library for reading and writing MP4 files. A denial of service vulnerability exists in Bento4 version 1.6.0-639, which stems from excessive memory consumption in the AP4Array ::EnsureCapacity function in Core/Ap4Array.h. The vulnerability can be exploited to cause a...

Bento4 代码问题漏洞

Bento4 is an open source C++ library for reading and writing MP4 files. A denial of service vulnerability exists in Bento4 version 1.6.0-639, which stems from a null pointer dereference in AP4File::ParseStream in Core/Ap4File.cpp. An attacker could exploit the vulnerability to cause a denial of...

Bento4 安全漏洞

Bento4 is an open source C++ library for reading and writing MP4 files. A denial of service vulnerability exists in Bento4 version 1.6.0-639, which stems from excessive memory consumption in the AP4DataBuffer::ReallocateBuffer function in Core/Ap4DataBuffer.cpp. An attacker can exploit the...