Vulnerabilities (CVE)

Filtered by vendor Bento4 Subscribe
CVE Vendors Products Updated CVSS v2 CVSS v3
CVE-2017-14639 1 Bento4 1 Bento4 2019-10-03 6.8 MEDIUM 8.8 HIGH
AP4_VisualSampleEntry::ReadFields in Core/Ap4SampleEntry.cpp in Bento4 1.5.0-617 uses incorrect character data types, which causes a stack-based buffer underflow and out-of-bounds write, leading to denial of service (application crash) or possibly unspecified other impact.
CVE-2017-14647 1 Bento4 1 Bento4 2017-10-03 6.8 MEDIUM 8.8 HIGH
A heap-based buffer overflow was discovered in AP4_VisualSampleEntry::ReadFields in Core/Ap4SampleEntry.cpp in Bento4 1.5.0-617. The vulnerability causes an out-of-bounds write, which leads to remote denial of service or possibly code execution.
CVE-2017-14644 1 Bento4 1 Bento4 2017-09-28 6.8 MEDIUM 8.8 HIGH
A heap-based buffer overflow was discovered in the AP4_HdlrAtom class in Bento4 1.5.0-617. The vulnerability causes an out-of-bounds write, which leads to remote denial of service or possibly code execution.
CVE-2017-14261 1 Bento4 1 Bento4 2017-09-19 6.8 MEDIUM 7.8 HIGH
In the SDK in Bento4 1.5.0-616, the AP4_StszAtom class in Ap4StszAtom.cpp file contains a Read Memory Access Violation vulnerability. It is possible to exploit this vulnerability by opening a crafted .MP4 file.
CVE-2017-14257 1 Bento4 1 Bento4 2017-09-19 6.8 MEDIUM 7.8 HIGH
In the SDK in Bento4 1.5.0-616, AP4_AtomSampleTable::GetSample in Core/Ap4AtomSampleTable.cpp contains a Read Memory Access Violation vulnerability. It is possible to exploit this vulnerability by opening a crafted .MP4 file.
CVE-2017-14259 1 Bento4 1 Bento4 2017-09-19 6.8 MEDIUM 7.8 HIGH
In the SDK in Bento4 1.5.0-616, the AP4_StscAtom class in Ap4StscAtom.cpp contains a Write Memory Access Violation vulnerability. It is possible to exploit this vulnerability and possibly execute arbitrary code by opening a crafted .MP4 file.
CVE-2017-14258 1 Bento4 1 Bento4 2017-09-19 6.8 MEDIUM 7.8 HIGH
In the SDK in Bento4 1.5.0-616, SetItemCount in Core/Ap4StscAtom.h file contains a Write Memory Access Violation vulnerability. It is possible to exploit this vulnerability and possibly execute arbitrary code by opening a crafted .MP4 file.