Bento4 Bento4
15 CVEs affecting Bento4 Bento4. Latest disclosed: 2017-09-21. Critical: 0, High: 7.
| CVE | Severity | Score | Published | Summary |
|---|---|---|---|---|
CVE-2017-14647 | High | 8.8 | 2017-09-21 | A heap-based buffer overflow was discovered in AP4_VisualSampleEntry::ReadFields in Core/Ap4SampleEntry.cpp in Bento4 1.5.0-617. The vulnerability causes an ou… |
CVE-2017-14644 | High | 8.8 | 2017-09-21 | A heap-based buffer overflow was discovered in the AP4_HdlrAtom class in Bento4 1.5.0-617. The vulnerability causes an out-of-bounds write, which leads to remo… |
CVE-2017-14639 | High | 8.8 | 2017-09-21 | AP4_VisualSampleEntry::ReadFields in Core/Ap4SampleEntry.cpp in Bento4 1.5.0-617 uses incorrect character data types, which causes a stack-based buffer underfl… |
CVE-2017-14261 | High | 7.8 | 2017-09-11 | In the SDK in Bento4 1.5.0-616, the AP4_StszAtom class in Ap4StszAtom.cpp file contains a Read Memory Access Violation vulnerability. It is possible to exploit… |
CVE-2017-14259 | High | 7.8 | 2017-09-11 | In the SDK in Bento4 1.5.0-616, the AP4_StscAtom class in Ap4StscAtom.cpp contains a Write Memory Access Violation vulnerability. It is possible to exploit thi… |
CVE-2017-14258 | High | 7.8 | 2017-09-11 | In the SDK in Bento4 1.5.0-616, SetItemCount in Core/Ap4StscAtom.h file contains a Write Memory Access Violation vulnerability. It is possible to exploit this… |
CVE-2017-14257 | High | 7.8 | 2017-09-11 | In the SDK in Bento4 1.5.0-616, AP4_AtomSampleTable::GetSample in Core/Ap4AtomSampleTable.cpp contains a Read Memory Access Violation vulnerability. It is poss… |
CVE-2017-14645 | Medium | 6.5 | 2017-09-21 | A heap-based buffer over-read was discovered in AP4_BitStream::ReadBytes in Codecs/Ap4BitStream.cpp in Bento4 version 1.5.0-617. The vulnerability causes an ap… |
CVE-2017-14643 | Medium | 6.5 | 2017-09-21 | The AP4_HdlrAtom class in Core/Ap4HdlrAtom.cpp in Bento4 version 1.5.0-617 uses an incorrect character data type, leading to a heap-based buffer over-read and… |
CVE-2017-14642 | Medium | 6.5 | 2017-09-21 | A NULL pointer dereference was discovered in the AP4_HdlrAtom class in Bento4 version 1.5.0-617. The vulnerability causes a segmentation fault and application… |
CVE-2017-14641 | Medium | 6.5 | 2017-09-21 | A NULL pointer dereference was discovered in the AP4_DataAtom class in MetaData/Ap4MetaData.cpp in Bento4 version 1.5.0-617. The vulnerability causes a segment… |
CVE-2017-14640 | Medium | 6.5 | 2017-09-21 | A NULL pointer dereference was discovered in AP4_AtomSampleTable::GetSample in Core/Ap4AtomSampleTable.cpp in Bento4 version 1.5.0-617. The vulnerability cause… |
CVE-2017-14638 | Medium | 6.5 | 2017-09-21 | AP4_AtomFactory::CreateAtomFromStream in Core/Ap4AtomFactory.cpp in Bento4 version 1.5.0-617 has missing NULL checks, leading to a NULL pointer dereference, se… |
CVE-2017-12476 | Medium | 5.5 | 2017-09-06 | The AP4_AvccAtom::InspectFields function in Core/Ap4AvccAtom.cpp in Bento4 mp4dump before 1.5.0-616 allows remote attackers to cause a denial of service (NULL… |
CVE-2017-12474 | Medium | 5.5 | 2017-09-06 | The AP4_AtomSampleTable::GetSample function in Core/Ap4AtomSampleTable.cpp in Bento4 mp42ts before 1.5.0-616 allows remote attackers to cause a denial of servi… |