PT-2025-4040 · Axiomatic · Axiomatic Bento4
Zhang Yaoliang
·
Published
2025-01-16
·
Updated
2025-02-28
·
CVE-2025-0753
CVSS v2.0
7.5
High
| Vector | AV:N/AC:L/Au:N/C:P/I:P/A:P |
Name of the Vulnerable Software and Affected Versions
Axiomatic Bento4 versions up to 1.6.0
Description
A critical vulnerability was found in Axiomatic Bento4, affecting the
AP4 StdcFileByteStream::ReadPartial function of the mp42aac component. This vulnerability leads to a heap-based buffer overflow. The attack can be initiated remotely. The exploit has been disclosed to the public and may be used. The vulnerability is related to the function AP4 StdcFileByteStream::ReadPartial() and is associated with a buffer overflow in memory, which can allow a remote attacker to impact the confidentiality, integrity, and availability of protected information.Recommendations
For Axiomatic Bento4 versions up to 1.6.0, consider disabling the
AP4 StdcFileByteStream::ReadPartial function as a temporary workaround until a patch is available. Restrict access to the mp42aac component to minimize the risk of exploitation. At the moment, there is no information about a newer version that contains a fix for this vulnerability.Exploit
Memory Corruption
Heap Based Buffer Overflow
Buffer Overflow
Found an issue in the description? Have something to add? Feel free to write us 👾
Related Identifiers
Affected Products
Axiomatic Bento4