Логотип exploitDog
Консоль
Логотип exploitDog

exploitDog

github логотип

GHSA-xp32-64gc-9mv5

Опубликовано: 27 янв. 2025
Источник: github
Github: Не прошло ревью
CVSS4: 6.9
CVSS3: 6.3

Описание

A vulnerability classified as critical has been found in Axiomatic Bento4 up to 1.6.0. This affects the function AP4_BitReader::ReadBits of the component mp42aac. The manipulation leads to heap-based buffer overflow. It is possible to initiate the attack remotely. The exploit has been disclosed to the public and may be used.

A vulnerability classified as critical has been found in Axiomatic Bento4 up to 1.6.0. This affects the function AP4_BitReader::ReadBits of the component mp42aac. The manipulation leads to heap-based buffer overflow. It is possible to initiate the attack remotely. The exploit has been disclosed to the public and may be used.

EPSS

Процентиль: 33%
0.00134
Низкий

6.9 Medium

CVSS4

6.3 Medium

CVSS3

Дефекты

CWE-119
CWE-787

Связанные уязвимости

CVSS3: 6.3
nvd
около 1 года назад

A vulnerability classified as critical has been found in Axiomatic Bento4 up to 1.6.0. This affects the function AP4_BitReader::ReadBits of the component mp42aac. The manipulation leads to heap-based buffer overflow. It is possible to initiate the attack remotely. The exploit has been disclosed to the public and may be used.

CVSS3: 6.3
fstec
около 1 года назад

Уязвимость компонента mp42aac функции AP4_BitReader::ReadBits библиотеки чтения и записи файлов ISO-MP4 Bento4, позволяющая нарушителю вызвать отказ в обслуживании

EPSS

Процентиль: 33%
0.00134
Низкий

6.9 Medium

CVSS4

6.3 Medium

CVSS3

Дефекты

CWE-119
CWE-787