CVE-2022-40775
https://notcve.org/view.php?id=CVE-2022-40775
An issue was discovered in Bento4 through 1.6.0-639. A NULL pointer dereference occurs in AP4_StszAtom::WriteFields. Se ha detectado un problema en Bento4 versiones hasta 1.6.0-639. Es producida una desreferencia de puntero NULL en la función AP4_StszAtom::WriteFields • https://github.com/axiomatic-systems/Bento4/issues/758 • CWE-476: NULL Pointer Dereference •
CVE-2022-40738
https://notcve.org/view.php?id=CVE-2022-40738
An issue was discovered in Bento4 through 1.6.0-639. A NULL pointer dereference occurs in AP4_DescriptorListWriter::Action in Core/Ap4Descriptor.h, called from AP4_EsDescriptor::WriteFields and AP4_Expandable::Write. Se ha detectado un problema en Bento4 versiones hasta 1.6.0-639. Se produce una desreferencia de puntero NULL en el archivo AP4_DescriptorListWriter::Action en Core/Ap4Descriptor.h, llamada desde AP4_EsDescriptor::WriteFields y AP4_Expandable::Write • https://github.com/axiomatic-systems/Bento4/issues/756 • CWE-476: NULL Pointer Dereference •
CVE-2022-40737
https://notcve.org/view.php?id=CVE-2022-40737
An issue was discovered in Bento4 through 1.6.0-639. A buffer over-read exists in the function AP4_StdcFileByteStream::WritePartial located in System/StdC/Ap4StdCFileByteStream.cpp, called from AP4_ByteStream::Write and AP4_HdlrAtom::WriteFields. Se ha detectado un problema en Bento4 versiones hasta 1.6.0-639. Se presenta una lectura excesiva del búfer en la función AP4_StdcFileByteStream::WritePartial ubicada en el archivo System/StdC/Ap4StdCFileByteStream.cpp, llamada desde AP4_ByteStream::Write y AP4_HdlrAtom::WriteFields • https://github.com/axiomatic-systems/Bento4/issues/756 • CWE-125: Out-of-bounds Read •
CVE-2021-32265
https://notcve.org/view.php?id=CVE-2021-32265
An issue was discovered in Bento4 through v1.6.0-637. A global-buffer-overflow exists in the function AP4_MemoryByteStream::WritePartial() located in Ap4ByteStream.cpp. It allows an attacker to cause code execution or information disclosure. Se ha detectado un problema en Bento4 en la versión 1.6.0-637. Se presenta un desbordamiento de búfer global en la función AP4_MemoryByteStream::WritePartial() ubicada en el archivo Ap4ByteStream.cpp. • https://github.com/axiomatic-systems/Bento4/issues/545 • CWE-120: Buffer Copy without Checking Size of Input ('Classic Buffer Overflow') •
CVE-2018-10790
https://notcve.org/view.php?id=CVE-2018-10790
The AP4_CttsAtom class in Core/Ap4CttsAtom.cpp in Bento4 1.5.1.0 allows remote attackers to cause a denial of service (application crash), related to a memory allocation failure, as demonstrated by mp2aac. La clase AP4_CttsAtom en el archivo Core/Ap4CttsAtom.cpp en Bento4 versión 1.5.1.0, permite a atacantes remotos causar una denegación de servicio (bloqueo de la aplicación), relacionada con un fallo de asignación de memoria, como se ha demostrado en mp2aac. • https://docs.google.com/document/d/1OSwQjtyALgV3OulmWGaTqZrSzk7Ta-xGrcLI0I7SPyM https://github.com/axiomatic-systems/Bento4/issues/390 • CWE-770: Allocation of Resources Without Limits or Throttling •