Browse CVEs

MEDIUM 5.5 CVE-2022-41847 An issue was discovered in Bento4 1.6.0-639. A memory leak exists in AP4_StdcFileByteStream::Create(AP4_FileByteStream*, char const*, AP4_FileByteStr… Bento4 No fix yet Fix from $1,6002022-09-30 MEDIUM 6.5 CVE-2022-40736 An issue was discovered in Bento4 1.6.0-639. There ie excessive memory consumption in AP4_CttsAtom::Create in Core/Ap4CttsAtom.cpp. Bento4 No fix yet Fix from $1,6002022-09-15 MEDIUM 6.5 CVE-2022-40438 Buffer overflow vulnerability in function AP4_MemoryByteStream::WritePartial in mp42aac in Bento4 v1.6.0-639, allows attackers to cause a denial of s… Bento4 No fix yet Fix from $1,6002022-09-14 MEDIUM 6.5 CVE-2022-40439 An memory leak issue was discovered in AP4_StdcFileByteStream::Create in mp42ts in Bento4 v1.6.0-639, allows attackers to cause a denial of service v… Bento4 No fix yet Fix from $1,6002022-09-14 MEDIUM 5.5 CVE-2022-35165 An issue in AP4_SgpdAtom::AP4_SgpdAtom() of Bento4-1.6.0-639 allows attackers to cause a Denial of Service (DoS) via a crafted mp4 input. Bento4 No fix yet Fix from $1,6002022-08-18 MEDIUM 5.5 CVE-2021-40943 In Bento4 1.6.0-638, there is a null pointer reference in the function AP4_DescriptorListInspector::Action function in Ap4Descriptor.h:124 , as demon… Bento4 No fix yet Fix from $1,6002022-06-28 HIGH 7.5 CVE-2021-40941 In Bento4 1.6.0-638, there is an allocator is out of memory in the function AP4_Array<AP4_TrunAtom::Entry>::EnsureCapacity in Ap4Array.h:172, as demo… Bento4 No fix yet Fix from $1,9502022-06-27 MEDIUM 5.5 CVE-2022-31282 Bento4 MP4Dump v1.2 was discovered to contain a segmentation violation via an unknown address at /Source/C++/Core/Ap4DataBuffer.cpp:175. Bento4 No fix yet Fix from $1,6002022-06-10 MEDIUM 5.5 CVE-2022-31285 An issue was discovered in Bento4 1.2. The allocator is out of memory in /Source/C++/Core/Ap4Array.h. Bento4 No fix yet Fix from $1,6002022-06-10 MEDIUM 5.5 CVE-2022-31287 An issue was discovered in Bento4 v1.2. There is an allocation size request error in /Ap4RtpAtom.cpp. Bento4 No fix yet Fix from $1,6002022-06-10 HIGH 8.1 CVE-2022-27607 Bento4 1.6.0-639 has a heap-based buffer over-read in the AP4_HvccAtom class, a different issue than CVE-2018-14531. Bento4 No fix yet Fix from $1,9502022-03-21 HIGH 7.5 CVE-2018-10790 The AP4_CttsAtom class in Core/Ap4CttsAtom.cpp in Bento4 1.5.1.0 allows remote attackers to cause a denial of service (application crash), related to… Bento4 No fix yet Fix from $1,9502021-08-25 HIGH 7.5 CVE-2020-23331 An issue was discovered in Bento4 version 06c39d9. A NULL pointer dereference exists in the AP4_DescriptorListWriter::Action component located in /Co… Bento4 No fix yet Fix from $1,9502021-08-17 HIGH 7.5 CVE-2020-23332 A heap-based buffer overflow exists in the AP4_StdcFileByteStream::ReadPartial component located in /StdC/Ap4StdCFileByteStream.cpp of Bento4 version… Bento4 No fix yet Fix from $1,9502021-08-17 MEDIUM 6.5 CVE-2020-21066 An issue was discovered in Bento4 v1.5.1.0. There is a heap-buffer-overflow in AP4_Dec3Atom::AP4_Dec3Atom at Ap4Dec3Atom.cpp, leading to a denial of … Bento4 No fix yet Fix from $1,6002021-08-13 MEDIUM 6.5 CVE-2020-19719EPSS 6% A buffer overflow vulnerability in Ap4ElstAtom.cpp of Bento 1.5.1-628 leads to a denial of service (DOS). Bento4 No fix yet Fix from $1,6002021-07-13 MEDIUM 6.5 CVE-2020-19720 An unhandled memory allocation failure in Core/AP4IkmsAtom.cpp of Bento 1.5.1-628 causes a NULL pointer dereference, leading to a denial of service (… Bento4 No fix yet Fix from $1,6002021-07-13 MEDIUM 6.5 CVE-2020-19721 A heap buffer overflow vulnerability in Ap4TrunAtom.cpp of Bento 1.5.1-628 may lead to an out-of-bounds write while running mp42aac, leading to syste… Bento4 No fix yet Fix from $1,6002021-07-13 MEDIUM 6.5 CVE-2020-19722 An unhandled memory allocation failure in Core/Ap4Atom.cpp of Bento 1.5.1-628 causes a direct copy to NULL pointer dereference, leading to a denial o… Bento4 No fix yet Fix from $1,6002021-07-13 MEDIUM 6.5 CVE-2020-19717 An unhandled memory allocation failure in Core/Ap48bdlAtom.cpp of Bento 1.5.1-628 causes a NULL pointer dereference, leading to a denial of service (… Bento4 No fix yet Fix from $1,6002021-07-13 MEDIUM 6.5 CVE-2020-19718 An unhandled memory allocation failure in Core/Ap4Atom.cpp of Bento 1.5.1-628 causes a NULL pointer dereference, leading to a denial of service (DOS). Bento4 No fix yet Fix from $1,6002021-07-13 HIGH 7.8 CVE-2019-20090 An issue was discovered in Bento4 1.5.1.0. There is a use-after-free in AP4_Sample::GetOffset in Core/Ap4Sample.h when called from Ap4LinearReader.cp… Bento4 No fix yet Fix from $1,9502019-12-30 MEDIUM 5.5 CVE-2019-20091 An issue was discovered in Bento4 1.5.1.0. There is a NULL pointer dereference in AP4_Descriptor::GetTag in mp42ts when called from AP4_DecoderConfig… Bento4 No fix yet Fix from $1,6002019-12-30 MEDIUM 5.5 CVE-2019-20092 An issue was discovered in Bento4 1.5.1.0. There is a NULL pointer dereference in AP4_Descriptor::GetTag in mp42ts when called from AP4_EsDescriptor:… Bento4 No fix yet Fix from $1,6002019-12-30 HIGH 7.8 CVE-2019-17529 An issue was discovered in Bento4 1.5.1.0. There is a heap-based buffer over-read in AP4_CencSampleEncryption::DoInspectFields in Core/Ap4CommonEncry… Bento4 No fix yet Fix from $1,9502019-10-12 HIGH 7.8 CVE-2019-17530 An issue was discovered in Bento4 1.5.1.0. There is a heap-based buffer over-read in AP4_PrintInspector::AddField in Core/Ap4Atom.cpp when called fro… Bento4 No fix yet Fix from $1,9502019-10-12 HIGH 7.5 CVE-2019-17528 An issue was discovered in Bento4 1.5.1.0. There is a SEGV in the function AP4_TfhdAtom::SetDefaultSampleSize at Core/Ap4TfhdAtom.h when called from … Bento4 No fix yet Fix from $1,9502019-10-12 MEDIUM 6.5 CVE-2019-17452 Bento4 1.5.1.0 has a NULL pointer dereference in AP4_DescriptorListInspector::Action in Core/Ap4Descriptor.h, related to AP4_IodsAtom::InspectFields … Bento4 No fix yet Fix from $1,6002019-10-10 MEDIUM 6.5 CVE-2019-17453 Bento4 1.5.1.0 has a NULL pointer dereference in AP4_DescriptorListWriter::Action in Core/Ap4Descriptor.h, related to AP4_IodsAtom::WriteFields in Co… Bento4 No fix yet Fix from $1,6002019-10-10 MEDIUM 6.5 CVE-2019-17454 Bento4 1.5.1.0 has a NULL pointer dereference in AP4_Descriptor::GetTag in Core/Ap4Descriptor.h, related to AP4_StsdAtom::GetSampleDescription in Cor… Bento4 No fix yet Fix from $1,6002019-10-10