CVE-2025-0753: Axiomatic Bento4, грешка в паметта

Описание

Оригинално описание

A vulnerability classified as critical was found in Axiomatic Bento4 up to 1.6.0. This vulnerability affects the function AP4_StdcFileByteStream::ReadPartial of the component mp42aac. The manipulation leads to heap-based buffer overflow. The attack can be initiated remotely. The exploit has been disclosed to the public and may be used.

Засегнати продукти

• Axiomatic Bento4: 1.0; 1.1; 1.2; 1.3; 1.4; 1.5; 1.6

Вид слабост

• CWE-122 Препълване на буфера в хийпа
• CWE-119 Нарушаване на границите на буфер в паметта

История

Други уязвимости в Axiomatic Bento4

• 5.3CVE-2026-5236
• 5.3CVE-2026-5235
• 6.3CVE-2025-8537
• 6.3CVE-2025-0870
• 6.9CVE-2025-0751

Първоизточници

• https://www.cve.org/CVERecord?id=CVE-2025-0753
• https://nvd.nist.gov/vuln/detail/CVE-2025-0753
• https://vuldb.com/?id.293518
• https://vuldb.com/?ctiid.293518
• https://vuldb.com/?submit.483326
• https://github.com/axiomatic-systems/Bento4/issues/991
• https://github.com/user-attachments/files/18434657/seeds.zip