إرسال #483326: bento Bento4 v1.6.0 Buffer Overflowالمعلومات

عنوانbento Bento4 v1.6.0 Buffer Overflow
الوصفA heap buffer overflow vulnerability exists in Bento4's AP4_StdcFileByteStream::ReadPartial function. This vulnerability allows a remote attacker to cause a program to access parts of the heap memory other than the allocated memory blocks through crafted input data, thereby causing memory corruption. Specifically, the vulnerability is triggered when the fread function is called, causing writes to be out of the allocated memory.
المصدر⚠️ https://github.com/axiomatic-systems/Bento4/issues/991
المستخدم
 NPU Unmanned Systems Safety Laboratory (UID 80309)
ارسال16/01/2025 09:07 AM (2 سنوات منذ)
الاعتدال27/01/2025 03:16 PM (11 days later)
الحالةتمت الموافقة
إدخال VulDB293518 [Axiomatic Bento4 حتى 1.6.0 mp42aac ReadPartial تلف الذاكرة]
النقاط20

Do you know our Splunk app?

Download it now for free!