Логотип exploitDog
Консоль
Логотип exploitDog

exploitDog

github логотип

GHSA-xj5r-h7gq-mhhx

Опубликовано: 27 янв. 2025
Источник: github
Github: Не прошло ревью
CVSS4: 6.9
CVSS3: 6.3

Описание

A vulnerability classified as critical was found in Axiomatic Bento4 up to 1.6.0. This vulnerability affects the function AP4_StdcFileByteStream::ReadPartial of the component mp42aac. The manipulation leads to heap-based buffer overflow. The attack can be initiated remotely. The exploit has been disclosed to the public and may be used.

A vulnerability classified as critical was found in Axiomatic Bento4 up to 1.6.0. This vulnerability affects the function AP4_StdcFileByteStream::ReadPartial of the component mp42aac. The manipulation leads to heap-based buffer overflow. The attack can be initiated remotely. The exploit has been disclosed to the public and may be used.

EPSS

Процентиль: 33%
0.00134
Низкий

6.9 Medium

CVSS4

6.3 Medium

CVSS3

Дефекты

CWE-119
CWE-787

Связанные уязвимости

CVSS3: 6.3
nvd
около 1 года назад

A vulnerability classified as critical was found in Axiomatic Bento4 up to 1.6.0. This vulnerability affects the function AP4_StdcFileByteStream::ReadPartial of the component mp42aac. The manipulation leads to heap-based buffer overflow. The attack can be initiated remotely. The exploit has been disclosed to the public and may be used.

CVSS3: 6.3
fstec
около 1 года назад

Уязвимость функции AP4_StdcFileByteStream::ReadPartial() библиотеки чтения и записи файлов ISO-MP4 Bento4, позволяющая нарушителю оказать воздействие на конфиденциальность, целостность и доступность защищаемой информации

EPSS

Процентиль: 33%
0.00134
Низкий

6.9 Medium

CVSS4

6.3 Medium

CVSS3

Дефекты

CWE-119
CWE-787