Bento4 vulnerabilities
We track 4 vulnerabilities in Bento4 products. 4 are rated high or critical, and none are known to be exploited. The most recent was published on April 2, 2024.
Latest Bento4 vulnerabilities
- 7.5 High severity
bento4: Use After Free
An issue was discovered in Bento4 v1.6.0-641-2-g1529b83. There is a heap-use-after-free in Ap4Sample.h in AP4_Sample::GetOffset() const, leading to a Denial of Service (DoS), as demonstrated by mp42ts.
- 7.5 High severity
bento4: Use After Free
An issue was discovered in Bento4 v1.6.0-641-2-g1529b83. There is a heap-use-after-free in AP4_UnknownAtom::~AP4_UnknownAtom at Ap4Atom.cpp, leading to a Denial of Service (DoS), as demonstrated by mp42ts.
- 8.8 High severity
bento4: Improper Control of Generation of Code
Buffer Overflow vulnerability in Bento4 Bento v.1.6.0-641 allows a remote attacker to execute arbitrary code via the AP4_MemoryByteStream::WritePartial at Ap4ByteStream.cpp.
- 9.8 Critical severity
bento4: Out-of-bounds Write
Buffer Overflow vulnerability in Bento4 Bento v.1.6.0-641 allows a remote attacker to execute arbitrary code via the AP4 BitReader::ReadCache() at Ap4Utils.cpp component.