Skip to main content

Vendor/product archive

axiosys / bento4 CVEs

Beta · best-effort

156 CVEs tagged to axiosys / bento45 Critical, 50 High, 99 Medium, 2 Low, 0 Unrated.

CVE-2022-3662

Published Oct 26, 2022

A vulnerability was found in Axiomatic Bento4. It has been declared as critical. This vulnerability affects the function GetOffset of the file Ap4Sample.h of the component mp42hls…

CVSS 7.3 · High
Vendor/product tagsBeta · best-effort

CVE-2022-40885

Published Oct 19, 2022

Bento4 v1.6.0-639 has a memory allocation issue that can cause denial of service.

CVSS 5.5 · Medium
Vendor/product tagsBeta · best-effort

CVE-2022-43038

Published Oct 19, 2022

Bento4 v1.6.0-639 was discovered to contain a heap overflow via the AP4_BitReader::ReadCache() function in mp42ts.

CVSS 6.5 · Medium
Vendor/product tagsBeta · best-effort

CVE-2022-43037

Published Oct 19, 2022

An issue was discovered in Bento4 1.6.0-639. There is a memory leak in the function AP4_File::ParseStream in /Core/Ap4File.cpp.

CVSS 6.5 · Medium
Vendor/product tagsBeta · best-effort

CVE-2022-43035

Published Oct 19, 2022

An issue was discovered in Bento4 v1.6.0-639. There is a heap-buffer-overflow in AP4_Dec3Atom::AP4_Dec3Atom at Ap4Dec3Atom.cpp, leading to a Denial of Service (DoS), as demonstrat…

CVSS 6.5 · Medium
Vendor/product tagsBeta · best-effort

CVE-2022-43034

Published Oct 19, 2022

An issue was discovered in Bento4 v1.6.0-639. There is a heap buffer overflow vulnerability in the AP4_BitReader::SkipBits(unsigned int) function in mp42ts.

CVSS 6.5 · Medium
Vendor/product tagsBeta · best-effort

CVE-2022-43033

Published Oct 19, 2022

An issue was discovered in Bento4 1.6.0-639. There is a bad free in the component AP4_HdlrAtom::~AP4_HdlrAtom() which allows attackers to cause a Denial of Service (DoS) via a cra…

CVSS 6.5 · Medium
Vendor/product tagsBeta · best-effort

CVE-2022-43032

Published Oct 19, 2022

An issue was discovered in Bento4 v1.6.0-639. There is a memory leak in AP4_DescriptorFactory::CreateDescriptorFromStream in Core/Ap4DescriptorFactory.cpp, as demonstrated by mp42…

CVSS 6.5 · Medium
Vendor/product tagsBeta · best-effort

CVE-2022-41430

Published Oct 3, 2022

Bento4 v1.6.0-639 was discovered to contain a heap overflow via the AP4_BitReader::ReadBit function in mp4mux.

CVSS 8.8 · High
Vendor/product tagsBeta · best-effort

CVE-2022-41429

Published Oct 3, 2022

Bento4 v1.6.0-639 was discovered to contain a heap overflow via the AP4_Atom::TypeFromString function in mp4tag.

CVSS 8.8 · High
Vendor/product tagsBeta · best-effort

CVE-2022-41428

Published Oct 3, 2022

Bento4 v1.6.0-639 was discovered to contain a heap overflow via the AP4_BitReader::ReadBits function in mp4mux.

CVSS 8.8 · High
Vendor/product tagsBeta · best-effort

CVE-2022-41427

Published Oct 3, 2022

Bento4 v1.6.0-639 was discovered to contain a memory leak in the AP4_AvcFrameParser::Feed function in mp4mux.

CVSS 6.5 · Medium
Vendor/product tagsBeta · best-effort

CVE-2022-41426

Published Oct 3, 2022

Bento4 v1.6.0-639 was discovered to contain a memory leak via the AP4_AtomFactory::CreateAtomFromStream function in mp4split.

CVSS 6.5 · Medium
Vendor/product tagsBeta · best-effort

CVE-2022-41425

Published Oct 3, 2022

Bento4 v1.6.0-639 was discovered to contain a segmentation violation via the AP4_Processor::ProcessFragments function in mp4decrypt.

CVSS 6.5 · Medium
Vendor/product tagsBeta · best-effort

CVE-2022-41424

Published Oct 3, 2022

Bento4 v1.6.0-639 was discovered to contain a memory leak via the AP4_SttsAtom::Create function in mp42hls.

CVSS 6.5 · Medium
Vendor/product tagsBeta · best-effort

CVE-2022-41423

Published Oct 3, 2022

Bento4 v1.6.0-639 was discovered to contain a segmentation violation in the mp4fragment component.

CVSS 6.5 · Medium
Vendor/product tagsBeta · best-effort

CVE-2022-41419

Published Oct 3, 2022

Bento4 v1.6.0-639 was discovered to contain a memory leak via the AP4_Processor::Process function in the mp4encrypt binary.

CVSS 6.5 · Medium
Vendor/product tagsBeta · best-effort

CVE-2022-41847

Published Sep 30, 2022

An issue was discovered in Bento4 1.6.0-639. A memory leak exists in AP4_StdcFileByteStream::Create(AP4_FileByteStream*, char const*, AP4_FileByteStream::Mode, AP4_ByteStream*&) i…

CVSS 5.5 · Medium
Vendor/product tagsBeta · best-effort

CVE-2022-41846

Published Sep 30, 2022

An issue was discovered in Bento4 1.6.0-639. There ie excessive memory consumption in the function AP4_DataBuffer::ReallocateBuffer in Core/Ap4DataBuffer.cpp.

CVSS 5.5 · Medium
Vendor/product tagsBeta · best-effort

CVE-2022-41845

Published Sep 30, 2022

An issue was discovered in Bento4 1.6.0-639. There ie excessive memory consumption in the function AP4_Array<AP4_ElstEntry>::EnsureCapacity in Core/Ap4Array.h.

CVSS 5.5 · Medium
Vendor/product tagsBeta · best-effort

CVE-2022-41841

Published Sep 30, 2022

An issue was discovered in Bento4 through 1.6.0-639. A NULL pointer dereference occurs in AP4_File::ParseStream in Core/Ap4File.cpp, which is called from AP4_File::AP4_File.

CVSS 5.5 · Medium
Vendor/product tagsBeta · best-effort

CVE-2022-40775

Published Sep 18, 2022

An issue was discovered in Bento4 through 1.6.0-639. A NULL pointer dereference occurs in AP4_StszAtom::WriteFields.

CVSS 5.5 · Medium
Vendor/product tagsBeta · best-effort

CVE-2022-40774

Published Sep 18, 2022

An issue was discovered in Bento4 through 1.6.0-639. There is a NULL pointer dereference in AP4_StszAtom::GetSampleSize.

CVSS 5.5 · Medium
Vendor/product tagsBeta · best-effort

CVE-2022-40738

Published Sep 15, 2022

An issue was discovered in Bento4 through 1.6.0-639. A NULL pointer dereference occurs in AP4_DescriptorListWriter::Action in Core/Ap4Descriptor.h, called from AP4_EsDescriptor::W…

CVSS 6.5 · Medium
Vendor/product tagsBeta · best-effort
Showing 51-75 of 156 CVEsPage 3 of 7