Floating-Point Exception in Bento4 Media Processing Tool
CVE-2024-57513

6.5MEDIUM

Key Information:

Vendor

Axiomatic Systems

Status
Bento4
Vendor
CVE Published:
29 January 2025

What is CVE-2024-57513?

A flaw exists in the AP4_TfraAtom::AP4_TfraAtom function of the Bento4 media processing toolkit, which may lead to unexpected behavior when handling floating-point operations. This vulnerability can be exploited under specific conditions, potentially allowing an attacker to disrupt normal operations or compromise the integrity of the media being processed.

References

https://github.com/axiomatic-systems/Bento4/issues/990
https://gist.github.com/G2FUZZ/91a1cc3b8f2b0720e984353d59...

CVSS V3.1

Score:
6.5
Severity:
MEDIUM
Confidentiality:
None
Integrity:
None
Availability:
None
Attack Vector:
Network
Attack Complexity:
Low
Privileges Required:
None
User Interaction:
Required
Scope:
Unchanged

Timeline

  • Vulnerability published

  • Vulnerability Reserved

.