Homepage

bento4@1.0.3

Full-featured MP4 format and MPEG DASH library and tools

  • latest version

    1.0.3

  • first published

    10 years ago

  • latest version published

    10 years ago

  • licenses detected

  • View bento4 package health on Snyk  (opens in a new tab)
    • Go back to all versions of this package
    Report a new vulnerability Found a mistake?

    Direct Vulnerabilities

    Known vulnerabilities in the bento4 package. This does not include vulnerabilities belonging to this package’s dependencies.

    Fix vulnerabilities automatically

    Snyk's AI Trust Platform automatically finds the best upgrade path and integrates with your development workflows. Secure your code at zero cost.

    Fix for free
    VulnerabilityVulnerable Version
    • M
    Allocation of Resources Without Limits or Throttling

    bento4 is a Full-featured MP4 format, MPEG DASH, HLS, CMAF SDK and tools.

    Affected versions of this package are vulnerable to Allocation of Resources Without Limits or Throttling via the SetDataSize function in Mp4Decrypt.cpp of the mp4decrypt component. An attacker can cause excessive resource allocation by sending specially crafted input remotely.

    How to fix Allocation of Resources Without Limits or Throttling?

    There is no fixed version for bento4.

    *
    • H
    Out-of-Bounds

    bento4 is a Full-featured MP4 format, MPEG DASH, HLS, CMAF SDK and tools.

    Affected versions of this package are vulnerable to Out-of-Bounds in the mp4info component.

    How to fix Out-of-Bounds?

    There is no fixed version for bento4.

    >=0.0.0
    • M
    Heap-based Buffer Overflow

    bento4 is a Full-featured MP4 format, MPEG DASH, HLS, CMAF SDK and tools.

    Affected versions of this package are vulnerable to Heap-based Buffer Overflow in the component mp42aac.

    How to fix Heap-based Buffer Overflow?

    There is no fixed version for bento4.

    *
    • H
    Denial of Service (DoS)

    bento4 is a Full-featured MP4 format, MPEG DASH, HLS, CMAF SDK and tools.

    Affected versions of this package are vulnerable to Denial of Service (DoS) due to a memory allocation issue in Ap4DataBuffe.

    How to fix Denial of Service (DoS)?

    There is no fixed version for bento4.

    *
    • H
    Denial of Service (DoS)

    bento4 is a Full-featured MP4 format, MPEG DASH, HLS, CMAF SDK and tools.

    Affected versions of this package are vulnerable to Denial of Service (DoS) due to memory leak via the mp4fragment.

    How to fix Denial of Service (DoS)?

    There is no fixed version for bento4.

    *
    • M
    Buffer Overflow

    bento4 is a Full-featured MP4 format, MPEG DASH, HLS, CMAF SDK and tools.

    Affected versions of this package are vulnerable to Buffer Overflow. A global-buffer-overflow exists in the function AP4_MemoryByteStream::WritePartial() located in Ap4ByteStream.cpp. It allows an attacker to cause code execution or information disclosure.

    How to fix Buffer Overflow?

    There is no fixed version for bento4.

    *
    Go back to all versions of this package