PT-2024-20953 · Bento4 · Bento4

Hee-Won

·

CVE-2024-25451

·

Published

2024-02-09

·

Updated

2024-02-12

CVSS v3.1

6.5

Medium

VectorAV:N/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H
Name of the Vulnerable Software and Affected Versions Bento4 version 1.6.0-640
Description The issue is related to an out-of-memory bug in the AP4 DataBuffer::ReallocateBuffer() function.
Recommendations For Bento4 version 1.6.0-640, consider restricting the use of the AP4 DataBuffer::ReallocateBuffer() function until a patch is available. At the moment, there is no information about a newer version that contains a fix for this issue.

Exploit

Fix

Resource Exhaustion

Found an issue in the description? Have something to add? Feel free to write us 👾
dbugs@ptsecurity.com

Weakness Enumeration

CWE-400

Related Identifiers

CVE-2024-25451

Affected Products

Bento4