Skip to content
OpenAdvisories
Medium · 6.5 CVE-2025-25942 EUVD-2025-4598GHSA-wr4v-2x2x-cprg

An issue in Bento4 v1.6.0-641 allows an attacker to obtain sensitive information via the the mp4fragment tool when processing invalid files…

Published Feb 19, 2025 · Updated Feb 20, 2025 · Assigned by mitre

Description

An issue in Bento4 v1.6.0-641 allows an attacker to obtain sensitive information via the the mp4fragment tool when processing invalid files. Specifically, memory allocated in SampleArray::SampleArray in Mp4Fragment.cpp is not properly released.

References