CVE-2025-0751: Axiomatic Bento4, грешка в паметта

Описание

Оригинално описание

A vulnerability classified as critical has been found in Axiomatic Bento4 up to 1.6.0. This affects the function AP4_BitReader::ReadBits of the component mp42aac. The manipulation leads to heap-based buffer overflow. It is possible to initiate the attack remotely. The exploit has been disclosed to the public and may be used.

Засегнати продукти

• Axiomatic Bento4: 1.0; 1.1; 1.2; 1.3; 1.4; 1.5; 1.6

Вид слабост

• CWE-122 Препълване на буфера в хийпа
• CWE-119 Нарушаване на границите на буфер в паметта

История

Други уязвимости в Axiomatic Bento4

• 5.3CVE-2026-5236
• 5.3CVE-2026-5235
• 6.3CVE-2025-8537
• 6.3CVE-2025-0870
• 6.9CVE-2025-0753

Първоизточници

• https://www.cve.org/CVERecord?id=CVE-2025-0751
• https://nvd.nist.gov/vuln/detail/CVE-2025-0751
• https://vuldb.com/?id.293517
• https://vuldb.com/?ctiid.293517
• https://vuldb.com/?submit.483315
• https://github.com/axiomatic-systems/Bento4/issues/991
• https://github.com/user-attachments/files/18434657/seeds.zip