Bento4 Heap Buffer Overflow Vulnerability (CNVD-2023-00375)

Bento4 is an open source C library for reading and writing MP4 files. Bento4 version 1.5.1.0 has a heap buffer overflow vulnerability, which stems from AP4 Dec3Atom::AP4 Dec3Atom in Ap4Dec3Atom.cpp lacks proper boundary checking and can be exploited by attackers to cause a denial of service impact.