Browse CVEs

CRITICAL 9.8 CVE-2018-14531 An issue was discovered in Bento4 1.5.1-624. There is an unspecified "heap-buffer-overflow" crash in the AP4_HvccAtom class in Core/Ap4HvccAtom.cpp. Bento4 No fix yet Fix from $2,3002018-07-23 CRITICAL 9.8 CVE-2018-14532 An issue was discovered in Bento4 1.5.1-624. There is a heap-based buffer over-read in AP4_Mpeg2TsVideoSampleStream::WriteSample in Core/Ap4Mpeg2Ts.c… Bento4 Mitigation only Fix from $2,3002018-07-23 MEDIUM 5.5 CVE-2018-14543 There exists one NULL pointer dereference vulnerability in AP4_JsonInspector::AddField in Ap4Atom.cpp in Bento4 1.5.1-624, which can allow attackers … Bento4 Mitigation only Fix from $1,6002018-07-23 MEDIUM 5.5 CVE-2018-14544 There exists one invalid memory read bug in AP4_SampleDescription::GetFormat() in Ap4SampleDescription.h in Bento4 1.5.1-624, which can allow attacke… Bento4 Mitigation only Fix from $1,6002018-07-23 MEDIUM 5.5 CVE-2018-14545 There exists one invalid memory read bug in AP4_SampleDescription::GetType() in Ap4SampleDescription.h in Bento4 1.5.1-624, which can allow attackers… Bento4 Mitigation only Fix from $1,6002018-07-23 MEDIUM 6.5 CVE-2018-14445 In Bento4 v1.5.1-624, AP4_File::ParseStream in Ap4File.cpp allows remote attackers to cause a denial of service (infinite loop) via a crafted MP4 fil… Bento4 No fix yet Fix from $1,6002018-07-20 CRITICAL 9.8 CVE-2018-13846 An issue has been found in Bento4 1.5.1-624. AP4_Mpeg2TsVideoSampleStream::WriteSample in Core/Ap4Mpeg2Ts.cpp has a heap-based buffer over-read after… Bento4 Mitigation only Fix from $2,3002018-07-10 HIGH 7.5 CVE-2018-13847 An issue has been found in Bento4 1.5.1-624. It is a SEGV in AP4_StcoAtom::AdjustChunkOffsets in Core/Ap4StcoAtom.cpp. Bento4 Mitigation only Fix from $1,9502018-07-10 HIGH 7.5 CVE-2018-13848 An issue has been found in Bento4 1.5.1-624. It is a SEGV in AP4_StszAtom::GetSampleSize in Core/Ap4StszAtom.cpp. Bento4 No fix yet Fix from $1,9502018-07-10 HIGH 7.8 CVE-2018-5253 The AP4_FtypAtom class in Core/Ap4FtypAtom.cpp in Bento4 1.5.1.0 has an Infinite loop via a crafted MP4 file that triggers size mishandling. Bento4 No fix yet Fix from $1,9502018-01-05 HIGH 7.8 CVE-2017-14260 In the SDK in Bento4 1.5.0-616, the AP4_StssAtom class in Ap4StssAtom.cpp contains a Write Memory Access Violation vulnerability. It is possible to e… Bento4 No fix yet Fix from $1,9502017-09-11