Jiayuan Zhang

**Name of the Vulnerable Software and Affected Versions** Bento4 version 1.6.0-639 **Description** A memory leak was discovered in the AP4 AvcFrameParser::Feed function in mp4mux. **Recommendations** For Bento4 version 1.6.0-639, consider updating to a newer version that contains a fix for this issue, although at the moment, there is no information about a newer version that contains a fix for this vulnerability.

**Name of the Vulnerable Software and Affected Versions** Xpdf version 4.04 **Description** An issue was discovered that causes a crash in the `gfseek( IO FILE*, long, int)` function in the `goo/gfile.cc` file. **Recommendations** For Xpdf version 4.04, as a temporary workaround, consider disabling the `gfseek()` function until a patch is available. At the moment, there is no information about a newer version that contains a fix for this vulnerability.

**Name of the Vulnerable Software and Affected Versions** Bento4 version 1.6.0-639 **Description** An issue in Bento4 leads to excessive memory consumption in the `AP4 Array<AP4 ElstEntry>::EnsureCapacity` function, located in Core/Ap4Array.h. **Recommendations** For Bento4 version 1.6.0-639, consider applying a patch or fix that addresses the excessive memory consumption issue in the `AP4 Array<AP4 ElstEntry>::EnsureCapacity` function. At the moment, there is no information about a newer version that contains a fix for this vulnerability.

**Name of the Vulnerable Software and Affected Versions** Bento4 version 1.6.0-639 **Description** An issue was discovered in the function `AP4 DataBuffer::ReallocateBuffer` in `Core/Ap4DataBuffer.cpp`, which leads to excessive memory consumption. **Recommendations** For Bento4 version 1.6.0-639, consider applying a patch or fix to the `AP4 DataBuffer::ReallocateBuffer` function to prevent excessive memory consumption. At the moment, there is no information about a newer version that contains a fix for this issue.