Heap Use-After-Free Vulnerability in Bento4 by Axiomatic Systems
CVE-2024-30807

Currently unrated

Key Information:

Vendor

Axiomatic Systems

Status
Bento4
Vendor
CVE Published:
2 April 2024

What is CVE-2024-30807?

A heap-use-after-free vulnerability found in Bento4 v1.6.0-641-2-g1529b83 can be exploited through the AP4_UnknownAtom destructor within Ap4Atom.cpp. This flaw can lead to a Denial of Service (DoS) scenario, enabling potential disruptions when manipulating multimedia files such as mp42ts. Users of this version of Bento4 are advised to apply security measures to mitigate risks associated with this vulnerability.

Human OS v1.0:
Ageing Is an Unpatched Zero-Day Vulnerability.

Remediate biological technical debt. Prime Ageing uses 95% high-purity SIRT6 activation to maintain genomic integrity and bolster systemic resilience.

Deploy the Patch

References

https://github.com/axiomatic-systems/Bento4/issues/937
https://github.com/zhangteng0526/CVE-information/blob/mai...

Timeline

  • Vulnerability published

JSON
.