PT-2023-22316 · Bento4 · Bento4

Z1R00

·

Publicado

2023-04-11

·

Atualizado

2024-04-08

·

CVE-2023-29576

CVSS v3.1

5.5

Média

VetorAV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H
Name of the Vulnerable Software and Affected Versions Bento4 version 1.6.0-639
Description A segmentation violation was discovered in the AP4 TrunAtom::SetDataOffset(int) function in Ap4TrunAtom.h.
Recommendations For Bento4 version 1.6.0-639, as a temporary workaround, consider disabling the AP4 TrunAtom::SetDataOffset(int) function until a patch is available. At the moment, there is no information about a newer version that contains a fix for this vulnerability.

Exploit

Out of bounds Read

Encontrou algum problema na descrição? Tem algo a acrescentar? Fique à vontade para nos escrever 👾
dbugs@ptsecurity.com

Enumeração de Fraquezas

CWE-125

Identificadores relacionados

ALT-PU-2024-6114
CVE-2023-29576

Produtos afetados

Bento4