CVE-2024-30808: Use After Free
Published Apr 2, 2024
·Updated
An issue was discovered in Bento4 v1.6.0-641-2-g1529b83. There is a heap-use-after-free in AP4SubStream::~AP4SubStream at Ap4ByteStream.cpp, leading to a Denial of Service (DoS), as demonstrated by mp42ts.
Affected Software
2 affected components
Bento4 Bento4
Axiosys Bento4=1.6.0-641
Event History
Apr 2, 2024
CVE Published
via MITRE·12:00 AM
Data Sourced
via MITRE·12:00 AM
Description
Data Sourced
via NVD·06:15 PM
DescriptionSeverityWeakness
Frequently Asked Questions
1
What is the severity of CVE-2024-30808?
CVE-2024-30808 is considered a Denial of Service (DoS) vulnerability due to a heap-use-after-free issue.
2
How do I fix CVE-2024-30808?
To fix CVE-2024-30808, upgrade to a patched version of Bento4 where the issue has been resolved.
3
What impact does CVE-2024-30808 have on systems?
CVE-2024-30808 can lead to Denial of Service (DoS), potentially disrupting service availability.
4
In which component is CVE-2024-30808 located?
CVE-2024-30808 is located in the AP4_SubStream destructor within Ap4ByteStream.cpp.
5
Which versions of Bento4 are affected by CVE-2024-30808?
Bento4 version 1.6.0-641-2-g1529b83 is known to be affected by CVE-2024-30808.