Browse CVEs

HIGH 8.8 CVE-2017-14639 AP4_VisualSampleEntry::ReadFields in Core/Ap4SampleEntry.cpp in Bento4 1.5.0-617 uses incorrect character data types, which causes a stack-based buff… Bento4 Patch available Fix from $1,9502017-09-21 HIGH 8.8 CVE-2017-14644 A heap-based buffer overflow was discovered in the AP4_HdlrAtom class in Bento4 1.5.0-617. The vulnerability causes an out-of-bounds write, which lea… Bento4 No fix yet Fix from $1,9502017-09-21 HIGH 8.8 CVE-2017-14647 A heap-based buffer overflow was discovered in AP4_VisualSampleEntry::ReadFields in Core/Ap4SampleEntry.cpp in Bento4 1.5.0-617. The vulnerability ca… Bento4 Mitigation only Fix from $1,9502017-09-21 MEDIUM 6.5 CVE-2017-14638 AP4_AtomFactory::CreateAtomFromStream in Core/Ap4AtomFactory.cpp in Bento4 version 1.5.0-617 has missing NULL checks, leading to a NULL pointer deref… Bento4 Patch available Fix from $1,6002017-09-21 MEDIUM 6.5 CVE-2017-14640 A NULL pointer dereference was discovered in AP4_AtomSampleTable::GetSample in Core/Ap4AtomSampleTable.cpp in Bento4 version 1.5.0-617. The vulnerabi… Bento4 Patch available Fix from $1,6002017-09-21 MEDIUM 6.5 CVE-2017-14641 A NULL pointer dereference was discovered in the AP4_DataAtom class in MetaData/Ap4MetaData.cpp in Bento4 version 1.5.0-617. The vulnerability causes… Bento4 Patch available Fix from $1,6002017-09-21 MEDIUM 6.5 CVE-2017-14642 A NULL pointer dereference was discovered in the AP4_HdlrAtom class in Bento4 version 1.5.0-617. The vulnerability causes a segmentation fault and ap… Bento4 Patch available Fix from $1,6002017-09-21 MEDIUM 6.5 CVE-2017-14643 The AP4_HdlrAtom class in Core/Ap4HdlrAtom.cpp in Bento4 version 1.5.0-617 uses an incorrect character data type, leading to a heap-based buffer over… Bento4 Patch available Fix from $1,6002017-09-21 MEDIUM 6.5 CVE-2017-14645 A heap-based buffer over-read was discovered in AP4_BitStream::ReadBytes in Codecs/Ap4BitStream.cpp in Bento4 version 1.5.0-617. The vulnerability ca… Bento4 Mitigation only Fix from $1,6002017-09-21 HIGH 7.8 CVE-2017-14257 In the SDK in Bento4 1.5.0-616, AP4_AtomSampleTable::GetSample in Core/Ap4AtomSampleTable.cpp contains a Read Memory Access Violation vulnerability. … Bento4 No fix yet Fix from $1,9502017-09-11 HIGH 7.8 CVE-2017-14258 In the SDK in Bento4 1.5.0-616, SetItemCount in Core/Ap4StscAtom.h file contains a Write Memory Access Violation vulnerability. It is possible to exp… Bento4 No fix yet Fix from $1,9502017-09-11 HIGH 7.8 CVE-2017-14259 In the SDK in Bento4 1.5.0-616, the AP4_StscAtom class in Ap4StscAtom.cpp contains a Write Memory Access Violation vulnerability. It is possible to e… Bento4 No fix yet Fix from $1,9502017-09-11 HIGH 7.8 CVE-2017-14261 In the SDK in Bento4 1.5.0-616, the AP4_StszAtom class in Ap4StszAtom.cpp file contains a Read Memory Access Violation vulnerability. It is possible … Bento4 No fix yet Fix from $1,9502017-09-11 MEDIUM 5.5 CVE-2017-12474 The AP4_AtomSampleTable::GetSample function in Core/Ap4AtomSampleTable.cpp in Bento4 mp42ts before 1.5.0-616 allows remote attackers to cause a denia… Bento4 after 1.5.0-615 Fix from $1,6002017-09-06 MEDIUM 5.5 CVE-2017-12476 The AP4_AvccAtom::InspectFields function in Core/Ap4AvccAtom.cpp in Bento4 mp4dump before 1.5.0-616 allows remote attackers to cause a denial of serv… Bento4 after 1.5.0-615 Fix from $1,6002017-09-06