الباحثون
رجوع
17Ssdp
#2986
من 60,596
97.1
إجمالي CVSS
الثغرات
·
15
متوسطة
12
عالية
3
PT-2022-23539
2022-10-26
7.5
CVE-2022-3667
Axiomatic
Axiomatic Bento4
A critical issue was found in Axiomatic Bento4, affecting the `AP4 MemoryByteStream::WritePartial` function in the `Ap4ByteStream.cpp` file of the `mp42aac` component. This issue leads to a heap-based buffer overflow and can be initiated remotely.
PT-2022-26720
2022-10-19
6.5
CVE-2022-43037
Bento4
Bento4
An issue was discovered in the function `AP4 File::ParseStream` in `/Core/Ap4File.cpp`, which results in a memory leak.
PT-2022-26716
2022-10-19
6.5
CVE-2022-43032
Bento4
Bento4
A memory leak issue was discovered in the `AP4 DescriptorFactory::CreateDescriptorFromStream` function located in `Core/Ap4DescriptorFactory.cpp`. This issue is demonstrated by the `mp42aac` tool.
PT-2022-26717
2022-10-19
6.5
CVE-2022-43033
Bento4
Bento4
An issue in the component `AP4 HdlrAtom::~AP4 HdlrAtom()` allows attackers to cause a Denial of Service (DoS) via a crafted input. This is due to a bad free, which can be exploited to disrupt the service.
PT-2022-26718
2022-10-19
6.5
CVE-2022-43034
Bento4
Bento4
An issue was discovered in the AP4 BitReader::SkipBits(unsigned int) function in mp42ts, which is a heap buffer overflow.
PT-2022-26719
2022-10-19
6.5
CVE-2022-43035
Bento4
Bento4
An issue was discovered in Bento4, leading to a Denial of Service (DoS). The issue is caused by a heap-buffer-overflow in `AP4 Dec3Atom::AP4 Dec3Atom` at `Ap4Dec3Atom.cpp`, as demonstrated by `mp42aac`.
PT-2022-26721
2022-10-19
6.5
CVE-2022-43038
Bento4
Bento4
A heap overflow issue was discovered in Bento4 via the AP4 BitReader::ReadCache() function in mp42ts.
PT-2022-25385
2022-09-14
6.5
CVE-2022-40439
Bento4
Bento4
A memory leak issue was found in the AP4 StdcFileByteStream::Create function in mp42ts, which can be exploited by attackers to cause a denial of service using a crafted file.
PT-2022-25384
2022-09-14
6.5
CVE-2022-40438
Bento4
Bento4
A buffer overflow issue exists in the `AP4 MemoryByteStream::WritePartial` function in mp42aac, which can be exploited by attackers to cause a denial of service. This can be achieved by providing a crafted file.
PT-2022-26722
2018-12-19
5.5
CVE-2022-43039
Gpac
Gpac
A segmentation violation was discovered in GPAC via the function `gf isom meta restore items ref` at `/isomedia/meta.c`.
PT-2022-26723
2018-12-19
7.8
CVE-2022-43040
Gpac
Gpac
A heap buffer overflow issue was discovered in GPAC via the (gf isom box dump start ex) function at /isomedia/box funcs.c.
PT-2022-26724
2018-12-19
7.8
CVE-2022-43042
Gpac
Gpac
A heap buffer overflow issue was discovered via the function `FixSDTPInTRAF` at `isomedia/isom intern.c`. This issue affects GPAC and is related to a heap buffer overflow.
PT-2022-26725
2018-12-19
5.5
CVE-2022-43043
Gpac
Gpac
A segmentation violation was discovered in GPAC via the function `BD CheckSFTimeOffset` at `/bifs/field decode.c`.
PT-2022-26726
2018-12-19
5.5
CVE-2022-43044
Gpac
Gpac
A segmentation violation was discovered in GPAC via the function `gf isom get meta item info` at `/isomedia/meta.c`.
PT-2022-26727
2018-12-19
5.5
CVE-2022-43045
Gpac
Gpac
A segmentation violation was discovered in GPAC via the function `gf dump vrml sffield` at `/scene manager/scene dump.c`. This issue was identified through the National Vulnerability Database.