CVE-2017-14643

Name of the Vulnerable Software and Affected Versions Bento4 version 1.5.0-617

Description The issue arises from the AP4 HdlrAtom class in Core/Ap4HdlrAtom.cpp, which uses an incorrect character data type. This leads to a heap-based buffer over-read and application crash in the AP4 BytesToUInt32BE function in Core/Ap4Utils.h.

Recommendations For Bento4 version 1.5.0-617, consider updating to a newer version that addresses this issue, as the current version uses an incorrect character data type that can cause a heap-based buffer over-read and application crash. At the moment, there is no information about a newer version that contains a fix for this vulnerability.