PatchTheCVEbento4 vulnerabilities
Recent CVEs affecting bento4 products. 15 tracked.
bento4 has 15 tracked vulnerabilities, 0 critical. A fixed release or vendor patch exists for 2. Most recent: 2017-09-21. Highest priority: CVE-2017-14644 (score 57/100).
- CVE-2017-14647 HIGH 8.8 DOWNGRADE A heap-based buffer overflow was discovered in AP4_VisualSampleEntry::ReadFields in Core/Ap4SampleEntry.cpp in
- CVE-2017-14645 MEDIUM 6.5 DOWNGRADE A heap-based buffer over-read was discovered in AP4_BitStream::ReadBytes in Codecs/Ap4BitStream.cpp in Bento4
- CVE-2017-14644 HIGH 8.8 DOWNGRADE A heap-based buffer overflow was discovered in the AP4_HdlrAtom class in Bento4 1.5.0-617
- CVE-2017-14643 MEDIUM 6.5 DOWNGRADE The AP4_HdlrAtom class in Core/Ap4HdlrAtom.cpp in Bento4 version 1.5.0-617 uses an incorrect character data ty
- CVE-2017-14642 MEDIUM 6.5 DOWNGRADE A NULL pointer dereference was discovered in the AP4_HdlrAtom class in Bento4 version 1.5.0-617
- CVE-2017-14641 MEDIUM 6.5 DOWNGRADE A NULL pointer dereference was discovered in the AP4_DataAtom class in MetaData/Ap4MetaData.cpp in Bento4 vers
- CVE-2017-14640 MEDIUM 6.5 DOWNGRADE A NULL pointer dereference was discovered in AP4_AtomSampleTable::GetSample in Core/Ap4AtomSampleTable.cpp in
- CVE-2017-14639 HIGH 8.8 DOWNGRADE AP4_VisualSampleEntry::ReadFields in Core/Ap4SampleEntry.cpp in Bento4 1.5.0-617 uses incorrect character data
- CVE-2017-14638 MEDIUM 6.5 DOWNGRADE AP4_AtomFactory::CreateAtomFromStream in Core/Ap4AtomFactory.cpp in Bento4 version 1.5.0-617 has missing NULL
- CVE-2017-14261 HIGH 7.8 DOWNGRADE In the SDK in Bento4 1.5.0-616, the AP4_StszAtom class in Ap4StszAtom.cpp file contains a Read Memory Access V
- CVE-2017-14259 HIGH 7.8 DOWNGRADE In the SDK in Bento4 1.5.0-616, the AP4_StscAtom class in Ap4StscAtom.cpp contains a Write Memory Access Viola
- CVE-2017-14258 HIGH 7.8 DOWNGRADE In the SDK in Bento4 1.5.0-616, SetItemCount in Core/Ap4StscAtom.h file contains a Write Memory Access Violati
- CVE-2017-14257 HIGH 7.8 DOWNGRADE In the SDK in Bento4 1.5.0-616, AP4_AtomSampleTable::GetSample in Core/Ap4AtomSampleTable.cpp contains a Read
- CVE-2017-12476 MEDIUM 5.5 UPGRADE The AP4_AvccAtom::InspectFields function in Core/Ap4AvccAtom.cpp in Bento4 mp4dump before 1.5.0-616 allows rem
- CVE-2017-12474 MEDIUM 5.5 UPGRADE The AP4_AtomSampleTable::GetSample function in Core/Ap4AtomSampleTable.cpp in Bento4 mp42ts before 1.5.0-616 a
FAQ
How do I fix bento4 vulnerabilities?
Open the CVE for your version, check the affected range, then follow the listed action: upgrade to the fixed release, or downgrade or mitigate if no fix exists yet. Commands for each OS are shown on every CVE page.
Is bento4 being exploited right now?
None of the tracked bento4 CVEs are on the CISA Known Exploited Vulnerabilities list at the moment. This is checked every 20 minutes.
Which bento4 CVE should I patch first?
CVE-2017-14644 currently ranks highest (57/100): A heap-based buffer overflow was discovered in the AP4_HdlrAtom class in Bento4 1.5.0-617.