High · 7.8 CVE-2024-57510 EUVD-2024-53604GHSA-cj9r-cvpx-fx3h

Buffer Overflow vulnerability in Bento4 mp42avc v.3bdc891602d19789b8e8626e4a3e613a937b4d35 allows a local attacker to execute arbitrary cod…

Published Jan 29, 2025 · Updated Feb 3, 2025 · Assigned by mitre

Description

Buffer Overflow vulnerability in Bento4 mp42avc v.3bdc891602d19789b8e8626e4a3e613a937b4d35 allows a local attacker to execute arbitrary code via the AP4_MemoryByteStream::WritePartial.

References

https://github.com/axiomatic-systems/Bento4/issues/989
https://gist.github.com/G2FUZZ/91a1cc3b8f2b0720e984353d59023b24