medium6.5
CVE-2022-40737
An issue was discovered in Bento4 through 1.6.0-639.
Impact
An issue was discovered in Bento4 through 1.6.0-639. A buffer over-read exists in the function AP4_StdcFileByteStream::WritePartial located in System/StdC/Ap4StdCFileByteStream.cpp, called from AP4_ByteStream::Write and AP4_HdlrAtom::WriteFields.
Affected products
| Vendor | Product | Affected versions |
|---|---|---|
| Axiosys | Bento4 | through 1.6.0-639 |