Segmentation Fault in Bento4 Media Processing Tool
CVE-2025-25947

5.5MEDIUM

Key Information:

Vendor

Axiomatic Systems

Status
Bento4
Vendor
CVE Published:
19 February 2025

What is CVE-2025-25947?

A flaw in the Bento4 media processing framework allows attackers to induce a segmentation fault by manipulating input MP4 files. This is caused by improper handling within the AP4_AtomParent::RemoveChild function during the execution of the mp4encrypt tool.

References

https://github.com/axiomatic-systems/Bento4/issues/994

CVSS V3.1

Score:
5.5
Severity:
MEDIUM
Confidentiality:
None
Integrity:
None
Availability:
None
Attack Vector:
Local
Attack Complexity:
Low
Privileges Required:
None
User Interaction:
Required
Scope:
Unchanged

Timeline

  • Vulnerability published

.