Yuhang Huang

The issue is related to a heap buffer overflow in the libtiff library when processing the `TIFFTAG INKNAMES` and `TIFFTAG NUMBEROFINKS` parameters. This can lead to a denial of service or potentially allow an attacker to execute arbitrary code, causing unexpected application termination.

A problematic issue has been found, affecting the `AP4 File::AP4 File` function of the `Mp42Hevc.cpp` file in the `mp42hevc` component. This issue leads to denial of service and can be initiated remotely.

A problematic issue was found, affecting the `ParseCommandLine` function of the `Mp4Tag/Mp4Tag.cpp` file in the `mp4tag` component. This issue leads to denial of service and can be exploited remotely.

A memory leak was discovered in the AP4 AvcFrameParser::Feed function in mp4mux.

An issue was discovered in the function `AP4 DataBuffer::ReallocateBuffer` in `Core/Ap4DataBuffer.cpp`, which leads to excessive memory consumption.

A memory leak issue exists in the `AP4 StdcFileByteStream::Create` function, specifically in the `System/StdC/Ap4StdCFileByteStream.cpp` file. This issue can lead to memory exhaustion if exploited.

A NULL pointer dereference issue occurs in the `AP4 File::ParseStream` function, located in `Core/Ap4File.cpp`, which is called from `AP4 File::AP4 File`.

An issue was discovered that causes a crash in the `gfseek( IO FILE*, long, int)` function in the `goo/gfile.cc` file.

An issue in Bento4 leads to excessive memory consumption in the `AP4 Array<AP4 ElstEntry>::EnsureCapacity` function, located in Core/Ap4Array.h.

An issue was discovered in Bento4, where there is excessive memory consumption in `AP4 CttsAtom::Create` in `Core/Ap4CttsAtom.cpp`.

An issue was discovered that leads to a NULL pointer dereference in `AP4 DescriptorListWriter::Action` in Core/Ap4Descriptor.h. This issue is called from `AP4 EsDescriptor::WriteFields` and `AP4 Expandable::Write`.

A buffer over-read issue exists in the function `AP4 StdcFileByteStream::WritePartial` located in `System/StdC/Ap4StdCFileByteStream.cpp`, which is called from `AP4 ByteStream::Write` and `AP4 HdlrAtom::WriteFields`.