Vulnerabilities > Axiosys > Bento4 > Medium

DATE CVE VULNERABILITY TITLE RISK
2022-09-18 CVE-2022-40775 NULL Pointer Dereference vulnerability in Axiosys Bento4
An issue was discovered in Bento4 through 1.6.0-639.
local
low complexity
axiosys CWE-476
5.5
2022-09-15 CVE-2022-40736 Unspecified vulnerability in Axiosys Bento4 1.6.0639
An issue was discovered in Bento4 1.6.0-639.
network
low complexity
axiosys
6.5
2022-09-15 CVE-2022-40737 Out-of-bounds Read vulnerability in Axiosys Bento4
An issue was discovered in Bento4 through 1.6.0-639.
network
low complexity
axiosys CWE-125
6.5
2022-09-15 CVE-2022-40738 NULL Pointer Dereference vulnerability in Axiosys Bento4
An issue was discovered in Bento4 through 1.6.0-639.
network
low complexity
axiosys CWE-476
6.5
2022-09-14 CVE-2022-40438 Classic Buffer Overflow vulnerability in Axiosys Bento4 1.6.0639
Buffer overflow vulnerability in function AP4_MemoryByteStream::WritePartial in mp42aac in Bento4 v1.6.0-639, allows attackers to cause a denial of service via a crafted file.
network
low complexity
axiosys CWE-120
6.5
2022-09-14 CVE-2022-40439 Memory Leak vulnerability in Axiosys Bento4 1.6.0639
An memory leak issue was discovered in AP4_StdcFileByteStream::Create in mp42ts in Bento4 v1.6.0-639, allows attackers to cause a denial of service via a crafted file.
network
low complexity
axiosys CWE-401
6.5
2022-08-18 CVE-2022-35165 Infinite Loop vulnerability in Axiosys Bento4 1.6.0639
An issue in AP4_SgpdAtom::AP4_SgpdAtom() of Bento4-1.6.0-639 allows attackers to cause a Denial of Service (DoS) via a crafted mp4 input.
local
low complexity
axiosys CWE-835
5.5
2022-06-28 CVE-2021-40943 NULL Pointer Dereference vulnerability in Axiosys Bento4 1.6.0638
In Bento4 1.6.0-638, there is a null pointer reference in the function AP4_DescriptorListInspector::Action function in Ap4Descriptor.h:124 , as demonstrated by GPAC.
local
low complexity
axiosys CWE-476
5.5
2022-06-10 CVE-2022-31282 Unspecified vulnerability in Axiosys Bento4 1.2
Bento4 MP4Dump v1.2 was discovered to contain a segmentation violation via an unknown address at /Source/C++/Core/Ap4DataBuffer.cpp:175.
local
low complexity
axiosys
5.5
2022-06-10 CVE-2022-31285 Allocation of Resources Without Limits or Throttling vulnerability in Axiosys Bento4 1.2
An issue was discovered in Bento4 1.2.
local
low complexity
axiosys CWE-770
5.5