CVE-2021-32265

Опубликовано: 20 сент. 2021

Источник: nvd

CVSS3: 8.8

CVSS2: 6.8

EPSS Низкий

Описание

An issue was discovered in Bento4 through v1.6.0-637. A global-buffer-overflow exists in the function AP4_MemoryByteStream::WritePartial() located in Ap4ByteStream.cpp. It allows an attacker to cause code execution or information disclosure.

Ссылки

https://github.com/axiomatic-systems/Bento4/issues/545
Exploit
Issue Tracking
Third Party Advisory
https://github.com/axiomatic-systems/Bento4/issues/545
Exploit
Issue Tracking
Third Party Advisory

Уязвимые конфигурации

Конфигурация 1

cpe:2.3:a:axiosys:bento4:*:*:*:*:*:*:*:*

Версия до 1.6.0-637 (включая)

EPSS

Процентиль: 70%

0.00639

Низкий

8.8 High

CVSS3

6.8 Medium

CVSS2

Дефекты

CWE-120

Связанные уязвимости