CVE-2022-35165

Name of the Vulnerable Software and Affected Versions Bento4 version 1.6.0-639

Description The issue allows attackers to cause a Denial of Service (DoS) via a crafted mp4 input. This is due to a problem in the AP4 SgpdAtom::AP4 SgpdAtom() function.

Recommendations For Bento4 version 1.6.0-639, consider disabling the AP4 SgpdAtom::AP4 SgpdAtom() function as a temporary workaround until a patch is available. Restrict the processing of crafted mp4 inputs to minimize the risk of exploitation. At the moment, there is no information about a newer version that contains a fix for this vulnerability.