CVE-2025-0870: Axiomatic Bento4 Ap4DataBuffer.h GetData heap-based overflow
A vulnerability was found in Axiomatic Bento4 up to 1.6.0-641. It has been rated as critical. Affected by this issue is the function AP4DataBuffer::GetData in the library Ap4DataBuffer.h. The manipulation leads to heap-based buffer overflow. The attack may be launched remotely. The complexity of an attack is rather high. The exploitation is known to be difficult. The exploit has been disclosed to the public and may be used. This product is using a rolling release to provide continious delivery. Therefore, no version details for affected nor updated releases are available.
Affected Software
Event History
Frequently Asked Questions
What is the severity of CVE-2025-0870?
CVE-2025-0870 has been rated as critical due to its potential for remote exploitation.
How do I fix CVE-2025-0870?
To fix CVE-2025-0870, update Axiomatic Bento4 to the latest version beyond 1.6.0-641.
What type of vulnerability is CVE-2025-0870?
CVE-2025-0870 is a heap-based buffer overflow vulnerability.
Can CVE-2025-0870 be exploited remotely?
Yes, CVE-2025-0870 can be exploited remotely.
Which software versions are affected by CVE-2025-0870?
CVE-2025-0870 affects all versions of Axiomatic Bento4 up to and including 1.6.0-641.