bento4 records

15 published records for vendor bento4.

Researcher profile

Entered KEV: 0 · 0%
Weaponized: 0 · 0%
Pre-auth RCE: 0
With a fix record: 0%
Median publish → KEV: No record has entered KEV

Records by year

Bar: total · dark part: CISA KEV.

Recurring classes

The weakness classes this vendor ships most often: where to look.

Attack profile

All records

15 records

CVE records
Action	CVE	Vulnerability	Severity	KEV	EPSS	Published
36Monitor	CVE-2017-14644No exploit	A heap-based buffer overflow was discovered in the AP4_HdlrAtom class in Bento4 1.5.0-617.bento4 · bento4 · CWE-787 Pre-auth Memory safety	High8.8	—	2.3%	Sep 21, 2017
36Monitor	CVE-2017-14647No exploit	A heap-based buffer overflow was discovered in AP4_VisualSampleEntry::ReadFields in Core/Ap4SampleEntry.cpp in Bento4 1.5.0-617.bento4 · bento4 · CWE-787 Pre-auth Memory safety	High8.8	—	2.0%	Sep 21, 2017
36Monitor	CVE-2017-14639No exploit	AP4_VisualSampleEntry::ReadFields in Core/Ap4SampleEntry.cpp in Bento4 1.5.0-617 uses incorrect character data types, which causes a stack-bbento4 · bento4 · CWE-843 Pre-auth	High8.8	—	1.7%	Sep 21, 2017
31Monitor	CVE-2017-14258No exploit	In the SDK in Bento4 1.5.0-616, SetItemCount in Core/Ap4StscAtom.h file contains a Write Memory Access Violation vulnerability.bento4 · bento4 · CWE-119 RCE Memory safety	High7.8	—	1.4%	Sep 11, 2017
31Monitor	CVE-2017-14259No exploit	In the SDK in Bento4 1.5.0-616, the AP4_StscAtom class in Ap4StscAtom.cpp contains a Write Memory Access Violation vulnerability.bento4 · bento4 · CWE-119 RCE Memory safety	High7.8	—	1.4%	Sep 11, 2017
31Monitor	CVE-2017-14261No exploit	In the SDK in Bento4 1.5.0-616, the AP4_StszAtom class in Ap4StszAtom.cpp file contains a Read Memory Access Violation vulnerability.bento4 · bento4 · CWE-119 Memory safety	High7.8	—	0.8%	Sep 11, 2017
31Monitor	CVE-2017-14257No exploit	In the SDK in Bento4 1.5.0-616, AP4_AtomSampleTable::GetSample in Core/Ap4AtomSampleTable.cpp contains a Read Memory Access Violation vulnerbento4 · bento4 · CWE-119 Memory safety	High7.8	—	0.8%	Sep 11, 2017
27Monitor	CVE-2017-14641No exploit	A NULL pointer dereference was discovered in the AP4_DataAtom class in MetaData/Ap4MetaData.cpp in Bento4 version 1.5.0-617.bento4 · bento4 · CWE-476 Pre-auth Memory safety Denial of service	Medium6.5	—	1.6%	Sep 21, 2017
27Monitor	CVE-2017-14640No exploit	A NULL pointer dereference was discovered in AP4_AtomSampleTable::GetSample in Core/Ap4AtomSampleTable.cpp in Bento4 version 1.5.0-617.bento4 · bento4 · CWE-476 Pre-auth Memory safety Denial of service	Medium6.5	—	1.6%	Sep 21, 2017
27Monitor	CVE-2017-14642No exploit	A NULL pointer dereference was discovered in the AP4_HdlrAtom class in Bento4 version 1.5.0-617.bento4 · bento4 · CWE-476 Pre-auth Memory safety Denial of service	Medium6.5	—	1.6%	Sep 21, 2017
26Monitor	CVE-2017-14643No exploit	The AP4_HdlrAtom class in Core/Ap4HdlrAtom.cpp in Bento4 version 1.5.0-617 uses an incorrect character data type, leading to a heap-based bubento4 · bento4 · CWE-125 Pre-auth Memory safety Denial of service	Medium6.5	—	1.6%	Sep 21, 2017
26Monitor	CVE-2017-14638No exploit	AP4_AtomFactory::CreateAtomFromStream in Core/Ap4AtomFactory.cpp in Bento4 version 1.5.0-617 has missing NULL checks, leading to a NULL poinbento4 · bento4 · CWE-476 Pre-auth Memory safety Denial of service	Medium6.5	—	1.5%	Sep 21, 2017
26Monitor	CVE-2017-14645No exploit	A heap-based buffer over-read was discovered in AP4_BitStream::ReadBytes in Codecs/Ap4BitStream.cpp in Bento4 version 1.5.0-617.bento4 · bento4 · CWE-125 Pre-auth Memory safety Denial of service	Medium6.5	—	1.1%	Sep 21, 2017
22Monitor	CVE-2017-12476No exploit	The AP4_AvccAtom::InspectFields function in Core/Ap4AvccAtom.cpp in Bento4 mp4dump before 1.5.0-616 allows remote attackers to cause a deniabento4 · bento4 · CWE-476 Memory safety Denial of service	Medium5.5	—	1.1%	Sep 6, 2017
22Monitor	CVE-2017-12474No exploit	The AP4_AtomSampleTable::GetSample function in Core/Ap4AtomSampleTable.cpp in Bento4 mp42ts before 1.5.0-616 allows remote attackers to causbento4 · bento4 · CWE-476 Memory safety Denial of service	Medium5.5	—	1.1%	Sep 6, 2017

CVE-2017-14644
36Monitor
A heap-based buffer overflow was discovered in the AP4_HdlrAtom class in Bento4 1.5.0-617.
HighCVSS 8.8No exploitEPSS 2%
- Pre-auth
- Memory safety
bento4 · bento4Sep 21, 2017
CVE-2017-14647
36Monitor
A heap-based buffer overflow was discovered in AP4_VisualSampleEntry::ReadFields in Core/Ap4SampleEntry.cpp in Bento4 1.5.0-617.
HighCVSS 8.8No exploitEPSS 2%
- Pre-auth
- Memory safety
bento4 · bento4Sep 21, 2017
CVE-2017-14639
36Monitor
AP4_VisualSampleEntry::ReadFields in Core/Ap4SampleEntry.cpp in Bento4 1.5.0-617 uses incorrect character data types, which causes a stack-b
HighCVSS 8.8No exploitEPSS 1%
- Pre-auth
bento4 · bento4Sep 21, 2017
CVE-2017-14258
31Monitor
In the SDK in Bento4 1.5.0-616, SetItemCount in Core/Ap4StscAtom.h file contains a Write Memory Access Violation vulnerability.
HighCVSS 7.8No exploitEPSS 1%
- RCE
- Memory safety
bento4 · bento4Sep 11, 2017
CVE-2017-14259
31Monitor
In the SDK in Bento4 1.5.0-616, the AP4_StscAtom class in Ap4StscAtom.cpp contains a Write Memory Access Violation vulnerability.
HighCVSS 7.8No exploitEPSS 1%
- RCE
- Memory safety
bento4 · bento4Sep 11, 2017
CVE-2017-14261
31Monitor
In the SDK in Bento4 1.5.0-616, the AP4_StszAtom class in Ap4StszAtom.cpp file contains a Read Memory Access Violation vulnerability.
HighCVSS 7.8No exploitEPSS 0%
- Memory safety
bento4 · bento4Sep 11, 2017
CVE-2017-14257
31Monitor
In the SDK in Bento4 1.5.0-616, AP4_AtomSampleTable::GetSample in Core/Ap4AtomSampleTable.cpp contains a Read Memory Access Violation vulner
HighCVSS 7.8No exploitEPSS 0%
- Memory safety
bento4 · bento4Sep 11, 2017
CVE-2017-14641
27Monitor
A NULL pointer dereference was discovered in the AP4_DataAtom class in MetaData/Ap4MetaData.cpp in Bento4 version 1.5.0-617.
MediumCVSS 6.5No exploitEPSS 1%
bento4 · bento4Sep 21, 2017
CVE-2017-14640
27Monitor
A NULL pointer dereference was discovered in AP4_AtomSampleTable::GetSample in Core/Ap4AtomSampleTable.cpp in Bento4 version 1.5.0-617.
MediumCVSS 6.5No exploitEPSS 1%
bento4 · bento4Sep 21, 2017
CVE-2017-14642
27Monitor
A NULL pointer dereference was discovered in the AP4_HdlrAtom class in Bento4 version 1.5.0-617.
MediumCVSS 6.5No exploitEPSS 1%
bento4 · bento4Sep 21, 2017
CVE-2017-14643
26Monitor
The AP4_HdlrAtom class in Core/Ap4HdlrAtom.cpp in Bento4 version 1.5.0-617 uses an incorrect character data type, leading to a heap-based bu
MediumCVSS 6.5No exploitEPSS 1%
bento4 · bento4Sep 21, 2017
CVE-2017-14638
26Monitor
AP4_AtomFactory::CreateAtomFromStream in Core/Ap4AtomFactory.cpp in Bento4 version 1.5.0-617 has missing NULL checks, leading to a NULL poin
MediumCVSS 6.5No exploitEPSS 1%
bento4 · bento4Sep 21, 2017
CVE-2017-14645
26Monitor
A heap-based buffer over-read was discovered in AP4_BitStream::ReadBytes in Codecs/Ap4BitStream.cpp in Bento4 version 1.5.0-617.
MediumCVSS 6.5No exploitEPSS 1%
bento4 · bento4Sep 21, 2017
CVE-2017-12476
22Monitor
The AP4_AvccAtom::InspectFields function in Core/Ap4AvccAtom.cpp in Bento4 mp4dump before 1.5.0-616 allows remote attackers to cause a denia
MediumCVSS 5.5No exploitEPSS 1%
- Memory safety
- Denial of service
bento4 · bento4Sep 6, 2017
CVE-2017-12474
22Monitor
The AP4_AtomSampleTable::GetSample function in Core/Ap4AtomSampleTable.cpp in Bento4 mp42ts before 1.5.0-616 allows remote attackers to caus
MediumCVSS 5.5No exploitEPSS 1%
- Memory safety
- Denial of service
bento4 · bento4Sep 6, 2017