Vulnerability Information
Although we use advanced large model technology, its output may still contain inaccurate or outdated information.Shenlong tries to ensure data accuracy, but please verify and judge based on the actual situation.
Vulnerability Title
Axiomatic Bento4 mp4decrypt Mp4Decrypt.cpp SetDataSize allocation of resources
Vulnerability Description
A vulnerability, which was classified as problematic, was found in Axiomatic Bento4 up to 1.6.0-641. Affected is the function AP4_DataBuffer::SetDataSize of the file Mp4Decrypt.cpp of the component mp4decrypt. The manipulation leads to allocation of resources. It is possible to launch the attack remotely. The complexity of an attack is rather high. The exploitability is told to be difficult. The exploit has been disclosed to the public and may be used.
CVSS Information
CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:L
Vulnerability Type
不加限制或调节的资源分配
Vulnerability Title
Bento4 安全漏洞
Vulnerability Description
Bento4是Axiomatic Systems开源的一款用于读写MP4文件的开源的C++库。 Bento4 6.0-641及之前版本存在安全漏洞，该漏洞源于文件Mp4Decrypt.cpp中函数AP4_DataBuffer::SetDataSize存在资源分配问题。
CVSS Information
N/A
Vulnerability Type
N/A