Security Advisories
CVEs affecting projects tracked on Release Alert, from NVD & OSV.
CVE-2025-0751
6.3
MEDIUMCVSS v3
Severity scale
010
Description
A vulnerability classified as critical has been found in Axiomatic Bento4 up to 1.6.0. This affects the function AP4_BitReader::ReadBits of the component mp42aac. The manipulation leads to heap-based buffer overflow. It is possible to initiate the attack remotely. The exploit has been disclosed to the public and may be used.
axiomatic-systems/Bento4
GitHubFull-featured MP4 format, MPEG DASH, HLS, CMAF SDK and tools
GitHubFull-featured MP4 format, MPEG DASH, HLS, CMAF SDK and tools<= 1.6.0NVD