CVE-2024-25454

Summary

CVE-2024-25454 is a newly identified vulnerability in Bento4 v1.6.0-640. This issue involves a NULL pointer dereference in the AP4_DescriptorFinder::Test() function, which can lead to unintended application behavior or crashes. An attacker could potentially exploit this vulnerability to execute arbitrary code or cause denial-of-service conditions. Users of Bento4 are advised to update to a patched version as soon as possible to mitigate this risk.

Prevent cyber attacks with Recorded Future by prioritizing and patching critical vulnerabilities being exploited by threat actors targeting your industry. Book your demo to learn more.