Priority HIGH 73
Buffer Overflow vulnerability in Bento4 Bento v.1.6.0-641 allows a remote attacker to execute arbitrary code via the AP4_MemoryByteStream::WritePartial at Ap4ByteStream.cpp.
CVSS 3.1HIGH 8.8· Network · Low privileges · No interaction · EPSS 0.01494 · Published 2024-04-02 · No fix listed CWE-94
Priority HIGH 73
A vulnerability was found in Axiomatic Bento4.
CVSS 3.1HIGH 7.8· Local · No auth · User interaction · EPSS 0.00951 · Published 2022-10-26 · No fix listed CWE-119
Priority HIGH 73
A vulnerability, which was classified as critical, has been found in Axiomatic Bento4.
CVSS 3.1HIGH 7.8· Local · No auth · User interaction · EPSS 0.00872 · Published 2022-10-26 · No fix listed CWE-119
Priority HIGH 73
A vulnerability classified as critical was found in Axiomatic Bento4.
CVSS 3.1HIGH 7.8· Local · No auth · User interaction · EPSS 0.00941 · Published 2022-10-26 · No fix listed CWE-119
Priority HIGH 73
A vulnerability classified as critical has been found in Axiomatic Bento4.
CVSS 3.1HIGH 7.8· Local · No auth · User interaction · EPSS 0.00941 · Published 2022-10-26 · No fix listed CWE-119
Priority HIGH 73
A vulnerability was found in Axiomatic Bento4.
CVSS 3.1HIGH 7.8· Local · No auth · User interaction · EPSS 0.00872 · Published 2022-10-26 · No fix listed CWE-119
Priority HIGH 72
A vulnerability, which was classified as critical, was found in Axiomatic Bento4.
CVSS 3.1HIGH 7.5· Network · No auth · No interaction · EPSS 0.01429 · Published 2022-10-26 · No fix listed CWE-119
Priority HIGH 71
A vulnerability classified as critical was found in Axiomatic Bento4.
CVSS 3.1HIGH 8.8· Network · No auth · User interaction · EPSS 0.008 · Published 2022-11-13 · No fix listed CWE-119
Priority HIGH 70
An issue in Bento4 Bento v.1.6.0-641 allows a remote attacker to execute arbitrary code via the Ap4MdhdAtom.cpp,AP4_MdhdAtom::AP4_MdhdAtom,mp4fragment
CVSS 3.1HIGH 8.1· Network · No auth · No interaction · EPSS 0.01224 · Published 2024-04-02 · No fix listed CWE-94
Priority HIGH 69
Buffer Overflow vulnerability in Bento4 v.1.6.0-641 allows a local attacker to execute arbitrary code via the AP4_Stz2Atom::AP4_Stz2Atom component located in Ap4Stz2Atom.cpp.
CVSS 3.1HIGH 7.8· Local · Low privileges · No interaction · EPSS 0.00231 · Published 2025-02-19 · No fix listed CWE-94
Priority HIGH 67
Buffer Overflow vulnerability in Bento4 v.1.6.0-641 allows a local attacker to execute arbitrary code via the Ap4RtpAtom.cpp, specifically in AP4_RtpAtom::AP4_RtpAtom, during the execution of mp4fragment with a crafted M…
CVSS 3.1HIGH 7.3· Local · Low privileges · User interaction · EPSS 0.00239 · Published 2025-02-19 · No fix listed CWE-94
Priority HIGH 67
A vulnerability, which was classified as critical, has been found in Axiomatic Bento4.
CVSS 3.1HIGH 7.8· Local · No auth · User interaction · EPSS 0.00881 · Published 2022-10-31 · No fix listed CWE-119
Priority HIGH 67
A vulnerability classified as critical was found in Axiomatic Bento4 5e7bb34.
CVSS 3.1HIGH 7.8· Local · No auth · User interaction · EPSS 0.00773 · Published 2022-10-31 · No fix listed CWE-119
Priority MEDIUM 64
A vulnerability was found in Axiomatic Bento4 and classified as problematic.
CVSS 3.1MEDIUM 5.5· Local · No auth · User interaction · EPSS 0.00917 · Published 2022-10-26 · No fix listed CWE-404
Priority MEDIUM 64
A vulnerability has been found in Axiomatic Bento4 and classified as problematic.
CVSS 3.1MEDIUM 5.5· Local · No auth · User interaction · EPSS 0.00817 · Published 2022-10-26 · No fix listed CWE-404
Priority MEDIUM 64
A vulnerability was found in Axiomatic Bento4.
CVSS 3.1MEDIUM 5.5· Local · No auth · User interaction · EPSS 0.00817 · Published 2022-10-26 · No fix listed CWE-404
Priority MEDIUM 62
An issue in Bento4 v1.6.0-641 allows an attacker to obtain sensitive information via the the Mp4Fragment.cpp and in AP4_DescriptorFactory::CreateDescriptorFromStream at Ap4DescriptorFactory.cpp.
CVSS 3.1MEDIUM 6.5· Network · No auth · User interaction · EPSS 0.0038 · Published 2025-02-19 · No fix listed CWE-200
Priority MEDIUM 62
An issue in Bento4 v1.6.0-641 allows an attacker to obtain sensitive information via the the mp4fragment tool when processing invalid files.
CVSS 3.1MEDIUM 6.5· Network · No auth · User interaction · EPSS 0.0038 · Published 2025-02-19 · No fix listed CWE-200
Priority MEDIUM 62
An issue was discovered in Bento4 v1.6.0-641-2-g1529b83.
CVSS 3.1MEDIUM 6.5· Network · No auth · User interaction · EPSS 0.00526 · Published 2024-04-02 · No fix listed CWE-122
Priority MEDIUM 62
Bento4 v1.5.1-628 contains a Memory leak on AP4_Movie::AP4_Movie, parsing tracks and added into m_Tracks list, but mp42aac cannot correctly delete when we got an no audio track found error.
CVSS 3.1MEDIUM 6.5· Network · No auth · User interaction · EPSS 0.00643 · Published 2024-02-28 · No fix listed CWE-401
Priority MEDIUM 62
Bento4 v1.6.0-639 was discovered to contain a heap overflow via the AP4_BitReader::ReadCache() function in mp42ts.
CVSS 3.1MEDIUM 6.5· Network · No auth · User interaction · EPSS 0.00704 · Published 2022-10-19 · No fix listed CWE-787
Priority MEDIUM 62
An issue was discovered in Bento4 1.6.0-639.
CVSS 3.1MEDIUM 6.5· Network · No auth · User interaction · EPSS 0.00704 · Published 2022-10-19 · No fix listed CWE-401
Priority MEDIUM 62
An issue was discovered in Bento4 v1.6.0-639.
CVSS 3.1MEDIUM 6.5· Network · No auth · User interaction · EPSS 0.00732 · Published 2022-10-19 · No fix listed CWE-787
Priority MEDIUM 62
An issue was discovered in Bento4 v1.6.0-639.
CVSS 3.1MEDIUM 6.5· Network · No auth · User interaction · EPSS 0.00732 · Published 2022-10-19 · No fix listed CWE-787
Priority MEDIUM 62
An issue was discovered in Bento4 1.6.0-639.
CVSS 3.1MEDIUM 6.5· Network · No auth · User interaction · EPSS 0.00732 · Published 2022-10-19 · No fix listed CWE-416
Load more
THREATIST.IORead the docs