Submit #483315: bento4.com Bento4 v1.6.0 Buffer Overflowinfo

Titlebento4.com Bento4 v1.6.0 Buffer Overflow
DescriptionIn Bento4 v1.6.0, there is a heap buffer overflow vulnerability in the AP4_BitReader::ReadBits function. This vulnerability allows a remote attacker to cause a program to access parts of the heap memory other than the allocated memory blocks through crafted input data, thereby causing memory corruption。
Source⚠️ https://github.com/axiomatic-systems/Bento4/issues/991
User
 NPU Unmanned Systems Safety Laboratory (UID 80309)
Submission01/16/2025 08:45 (1 Year ago)
Moderation01/27/2025 15:15 (11 days later)
StatusAccepted
VulDB entry293517 [Axiomatic Bento4 up to 1.6.0 mp42aac AP4_BitReader::ReadBits heap-based overflow]
Points18

Are you interested in using VulDB?

Download the whitepaper to learn more about our service!