Description
An issue was discovered in Bento4 1.6.0-639. There ie excessive memory consumption in the function AP4_Array<AP4_ElstEntry>::EnsureCapacity in Core/Ap4Array.h.
References (2)
Core 2
Core References
Exploit, Third Party Advisory x_refsource_misc
https://github.com/axiomatic-systems/Bento4/issues/770
Exploit, Third Party Advisory x_refsource_misc
https://github.com/axiomatic-systems/Bento4/issues/747
Scores
CVSS v3
5.5
EPSS
0.0033
EPSS Percentile
24.8%
Attack Vector
LOCAL
CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H
CISA SSVC
Vulnrichment
Exploitation
poc
Automatable
no
Technical Impact
partial
Details
CWE
CWE-770
Status
published
Products (1)
axiosys/bento4
1.6.0-639
Published
Sep 30, 2022
Tracked Since
Feb 18, 2026