CVE-2024-30807: Use After Free
Published Apr 2, 2024
·Updated
An issue was discovered in Bento4 v1.6.0-641-2-g1529b83. There is a heap-use-after-free in AP4UnknownAtom::~AP4UnknownAtom at Ap4Atom.cpp, leading to a Denial of Service (DoS), as demonstrated by mp42ts.
Affected Software
2 affected components
Bento4 Bento4
Axiosys Bento4=1.6.0-641
Event History
Apr 2, 2024
CVE Published
via MITRE·12:00 AM
Data Sourced
via MITRE·12:00 AM
Description
Data Sourced
via NVD·06:15 PM
DescriptionSeverityWeakness
Frequently Asked Questions
1
What is the severity of CVE-2024-30807?
CVE-2024-30807 has a high severity due to the potential for Denial of Service (DoS) attacks.
2
How do I fix CVE-2024-30807?
To fix CVE-2024-30807, upgrade to the latest version of Bento4 that addresses this vulnerability.
3
What kind of vulnerability is CVE-2024-30807?
CVE-2024-30807 is a heap-use-after-free vulnerability found in the Bento4 library.
4
In which component of Bento4 is CVE-2024-30807 located?
CVE-2024-30807 is located in the AP4_UnknownAtom::~AP4_UnknownAtom function of Ap4Atom.cpp.
5
What are the potential consequences of CVE-2024-30807?
The potential consequences of CVE-2024-30807 include application crashes and Denial of Service (DoS).