PT-2025-4038 · Axiomatic · Axiomatic Bento4

Zhang Yaoliang · Published 2025-01-27 · Updated 2025-02-28 · CVE-2025-0751

Positive Technologies (AI Summary)

CVSS v2.0

7.5

High

Base vector

AV:N/AC:L/Au:N/C:P/I:P/A:P

Name of the Vulnerable Software and Affected Versions Axiomatic Bento4 versions up to 1.6.0

Description A critical issue has been found in Axiomatic Bento4, affecting the function (AP4 BitReader::ReadBits) of the component mp42aac. The manipulation leads to a heap-based buffer overflow. It is possible to initiate the attack remotely.

Recommendations Axiomatic Bento4 versions up to 1.6.0: Update to a version later than 1.6.0 to resolve the issue.

Exploit

Fix

Memory Corruption

Heap Based Buffer Overflow

Buffer Overflow

Weakness Enumeration

CWE-787

CWE-122

CWE-119

Related Identifiers

BDU:2025-02784

CVE-2025-0751

Affected Products

Axiomatic Bento4

References · 12

• 🔥 https://github.com/axiomatic-systems/Bento4/issues/991 · Exploit
• 🔥 https://github.com/user-attachments/files/18434657/seeds.zip · Exploit
• https://bdu.fstec.ru/vul/2025-02784 · Security Note
• https://osv.dev/vulnerability/CVE-2025-0751 · Vendor Advisory
• https://nvd.nist.gov/vuln/detail/CVE-2025-0751 · Security Note
• https://vuldb.com/?id.293517 · Note
• https://vuldb.com/?submit.483315 · Note
• https://t.me/cvenotify/112917 · Telegram Post
• https://t.me/cvedetector/16505 · Telegram Post
• https://twitter.com/CVEnew/status/1883965830733652129 · Twitter Post
• https://vuldb.com/?ctiid.293517 · Note
• https://twitter.com/CVETracker/status/1884330795214483709 · Twitter Post