Resource Allocation Vulnerability in Axiomatic Bento4 mp4decrypt
CVE-2025-8537
6.3MEDIUM
Key Information:
Badges
👾 Exploit Exists🟡 Public PoC
What is CVE-2025-8537?
A vulnerability has been identified in Axiomatic Bento4, specifically within the mp4decrypt component. The issue arises from the AP4_DataBuffer::SetDataSize function in the Mp4Decrypt.cpp file, where improper resource allocation could be exploited. This vulnerability may allow an attacker to manipulate data and potentially execute a remote attack. The attack's complexity is elevated, making exploitation challenging, but given that the exploit has been publicly disclosed, potential risks to systems using affected versions are present.
Affected Version(s)
Bento4 1.6.0-641
Exploit Proof of Concept (PoC)
PoC code is written by security researchers to demonstrate the vulnerability can be exploited. PoC code is also a key component for weaponization which could lead to ransomware.