Bento4 Denial of Service Vulnerability (CNVD-2023-00384)

Bento4 is an open source C library for reading and writing MP4 files. Bento4 version 1.5.1.0 suffers from a denial of service vulnerability that stems from a memory allocation failure in the AP4 CttsAtom class in Core/Ap4CttsAtom.cpp, which can be exploited by remote attackers to cause a denial of service impact.