PT-2022-25862
CVE-2022-41428
·
Published
2022-10-03
·
Updated
2024-04-08
Description by
CVSS 3.1
8.8
HighMetricsAV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H
Name of the Vulnerable Software and Affected Versions
Bento4 version 1.6.0-639
Description
A heap overflow issue was discovered in the AP4 BitReader::ReadBits function within the mp4mux component of Bento4.
Recommendations
For Bento4 version 1.6.0-639, consider restricting access to the mp4mux component until a patch is available. As a temporary workaround, avoid using the AP4 BitReader::ReadBits function to minimize the risk of exploitation.
Exploitability
Exploit
Fix
Impacts
Researchers
Vendors
Affected products
Found an issue in the description? Have something to add? Feel free to write us 👾