Read the docs

Vulnerabilities

Filters

Reset all
Threatist priority
Signals
Fix status
Impact type
Attack vector
Requirements
Product

Products as named in CPE, with their records.

Published
Weakness (CWE)
2 selected

15 records

Priority LOW 32

The AP4_HdlrAtom class in Core/Ap4HdlrAtom.cpp in Bento4 version 1.5.0-617 uses an incorrect character data type, leading to a heap-based buffer over-read and application crash in AP4_BytesToUInt32BE in Core/Ap4Utils.h.

CVSS 3.0MEDIUM 6.5 Network No auth User interaction EPSS 0.01615 Published 2017-09-21 No fix listed CWE-125
Priority MEDIUM 41

AP4_VisualSampleEntry::ReadFields in Core/Ap4SampleEntry.cpp in Bento4 1.5.0-617 uses incorrect character data types, which causes a stack-based buffer underflow and out-of-bounds write, leading to denial of service (app…

CVSS 3.0HIGH 8.8 Network No auth User interaction EPSS 0.01705 Published 2017-09-21 No fix listed CWE-843
Priority LOW 32

AP4_AtomFactory::CreateAtomFromStream in Core/Ap4AtomFactory.cpp in Bento4 version 1.5.0-617 has missing NULL checks, leading to a NULL pointer dereference, segmentation fault, and application crash in AP4_Atom::SetType…

CVSS 3.0MEDIUM 6.5 Network No auth User interaction EPSS 0.01559 Published 2017-09-21 No fix listed CWE-476
Priority LOW 27

The AP4_AvccAtom::InspectFields function in Core/Ap4AvccAtom.cpp in Bento4 mp4dump before 1.5.0-616 allows remote attackers to cause a denial of service (NULL pointer dereference and application crash) via a crafted mp4…

CVSS 3.0MEDIUM 5.5 Local No auth User interaction EPSS 0.01187 Published 2017-09-06 No fix listed CWE-476