CVE-2024-25453

Summary

CVE-2024-25453 is a newly disclosed vulnerability affecting Bento4 version 1.6.0-640. This issue involves a NULL pointer dereference in the AP4_StszAtom::GetSampleSize() function, which can result in unintended application behavior or even a crash. An attacker could potentially exploit this vulnerability by crafting a maliciously crafted media file to trigger the NULL pointer dereference. Successful exploitation could lead to arbitrary code execution or serious denial-of-service conditions. Users are urged to update their Bento4 installation as soon as possible to mitigate this risk.

Prevent cyber attacks with Recorded Future by prioritizing and patching critical vulnerabilities being exploited by threat actors targeting your industry. Book your demo to learn more.