CVE-2022-40737

Name of the Vulnerable Software and Affected Versions Bento4 versions 1.6.0-639 and earlier

Description A buffer over-read issue exists in the function AP4 StdcFileByteStream::WritePartial located in System/StdC/Ap4StdCFileByteStream.cpp, which is called from AP4 ByteStream::Write and AP4 HdlrAtom::WriteFields.

Recommendations For Bento4 versions 1.6.0-639 and earlier, as a temporary workaround, consider restricting the use of the AP4 StdcFileByteStream::WritePartial function until a patch is available. At the moment, there is no information about a newer version that contains a fix for this vulnerability.