High · 7.8 CVE-2024-57509 EUVD-2024-53603GHSA-h7h9-grcq-c72m

Buffer Overflow vulnerability in Bento4 mp42avc v.3bdc891602d19789b8e8626e4a3e613a937b4d35 allows a local attacker to execute arbitrary cod…

Published Jan 29, 2025 · Updated Jan 31, 2025 · Assigned by mitre

Description

Buffer Overflow vulnerability in Bento4 mp42avc v.3bdc891602d19789b8e8626e4a3e613a937b4d35 allows a local attacker to execute arbitrary code via the AP4_File::ParseStream and related functions.

References

https://github.com/axiomatic-systems/Bento4/issues/989
https://gist.github.com/G2FUZZ/91a1cc3b8f2b0720e984353d59023b24