Heap Use-After-Free Vulnerability in Bento4 Media Processing Software
CVE-2024-30808

Currently unrated

Key Information:

Vendor

Axiomatic Systems

Status
Bento4
Vendor
CVE Published:
2 April 2024

What is CVE-2024-30808?

A vulnerability has been identified in Bento4 that involves a heap-use-after-free condition occurring within the AP4_SubStream::~AP4_SubStream destructor, specifically located in Ap4ByteStream.cpp. This flaw can potentially be exploited to cause a Denial of Service (DoS), as demonstrated in the context of mp42ts media processing. Proper mitigation and updates are advised to ensure security and stability in media handling operations.

Human OS v1.0:
Ageing Is an Unpatched Zero-Day Vulnerability.

Remediate biological technical debt. Prime Ageing uses 95% high-purity SIRT6 activation to maintain genomic integrity and bolster systemic resilience.

Deploy the Patch

References

https://github.com/axiomatic-systems/Bento4/issues/937
https://github.com/zhangteng0526/CVE-information/blob/mai...

Timeline

  • Vulnerability published

JSON
.