PT-2023-22316 · Bento4 · Bento4

Z1R00

·

Published

2023-04-11

·

Updated

2024-04-08

·

CVE-2023-29576

CVSS v3.1

5.5

Medium

VectorAV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H
Name of the Vulnerable Software and Affected Versions Bento4 version 1.6.0-639
Description A segmentation violation was discovered in the AP4 TrunAtom::SetDataOffset(int) function in Ap4TrunAtom.h.
Recommendations For Bento4 version 1.6.0-639, as a temporary workaround, consider disabling the AP4 TrunAtom::SetDataOffset(int) function until a patch is available. At the moment, there is no information about a newer version that contains a fix for this vulnerability.

Exploit

Out of bounds Read

Weakness Enumeration

CWE-125

Related Identifiers

ALT-PU-2024-6114
CVE-2023-29576

Affected Products

Bento4