high7.5
CVE-2024-30809
An issue was discovered in Bento4 v1.6.0-641-2-g1529b83.
Impact
An issue was discovered in Bento4 v1.6.0-641-2-g1529b83. There is a heap-use-after-free in Ap4Sample.h in AP4_Sample::GetOffset() const, leading to a Denial of Service (DoS), as demonstrated by mp42ts.
Affected products
| Vendor | Product | Affected versions |
|---|---|---|
| Axiosys | Bento4 | Version 1.6.0-641 |