CVE-2025-0751 - Axiomatic Bento4 mp42aac ReadBits heap-based overflow

Back Back to CVE browser

MEDIUM

Axiomatic Bento4 mp42aac ReadBits heap-based overflow

Published Jan 27, 2025

6.9

MEDIUM

CVSS 4.0

EPSS 0.49%

Description

A vulnerability classified as critical has been found in Axiomatic Bento4 up to 1.6.0. This affects the function AP4_BitReader::ReadBits of the component mp42aac. The manipulation leads to heap-based buffer overflow. It is possible to initiate the attack remotely. The exploit has been disclosed to the public and may be used.

Affected products

Vendor Axiomatic Product Bento4 Default
n/a
- Version
  1.0
  Status
  affected
  Constraints
  -
- Version
  1.1
  Status
  affected
  Constraints
  -
- Version
  1.2
  Status
  affected
  Constraints
  -
- Version
  1.3
  Status
  affected
  Constraints
  -
- Version
  1.4
  Status
  affected
  Constraints
  -
- Version
  1.5
  Status
  affected
  Constraints
  -
- Version
  1.6
  Status
  affected
  Constraints
  -

Default status is the baseline for the product, each version can override it (e.g. patched versions marked unaffected).

Vendor

Product

Default status

Versions

Axiomatic

Bento4

n/a

Version	Status	Constraints
1.0	affected	-
1.1	affected	-
1.2	affected	-
1.3	affected	-
1.4	affected	-
1.5	affected	-
1.6	affected	-

Remediation

No remediation recorded yet.

Weaknesses (3)

CWE-119

Buffer Overflow

CWE-122

CWE-787

Out-of-bounds Write

References (6)

https://euvd.enisa.europa.eu/vulnerability/EUVD-2025-1852
Advisory
https://github.com/axiomatic-systems/Bento4/issues/991
issue-trackingExploit
https://github.com/user-attachments/files/18434657/seeds.zip
exploit
https://vuldb.com/?ctiid.293517
signaturepermissions-requiredPermissions RequiredVDB Entry
https://vuldb.com/?id.293517
vdb-entrytechnical-descriptionPermissions RequiredVDB Entry
https://vuldb.com/?submit.483315
third-party-advisoryThird Party AdvisoryVDB Entry

Link	Providers	Tags
https://euvd.enisa.europa.eu/vulnerability/EUVD-2025-1852		Advisory
https://github.com/axiomatic-systems/Bento4/issues/991		issue-trackingExploit
https://github.com/user-attachments/files/18434657/seeds.zip		exploit
https://vuldb.com/?ctiid.293517		signaturepermissions-requiredPermissions RequiredVDB Entry
https://vuldb.com/?id.293517		vdb-entrytechnical-descriptionPermissions RequiredVDB Entry
https://vuldb.com/?submit.483315		third-party-advisoryThird Party AdvisoryVDB Entry