CVE-2025-25947: Medium severity Bento4 Bento4 vulnerability
An issue in Bento4 v1.6.0-641 allows an attacker to trigger a segmentation fault via Ap4Atom.cpp, specifically in AP4AtomParent::RemoveChild, during the execution of mp4encrypt with a specially crafted MP4 input file.
Affected Software
Event History
Frequently Asked Questions
What is the severity of CVE-2025-25947?
The severity of CVE-2025-25947 is classified as moderate due to the potential for denial of service from a segmentation fault.
How do I fix CVE-2025-25947?
To fix CVE-2025-25947, update to a patched version of Bento4 that addresses this vulnerability.
What types of attacks can CVE-2025-25947 enable?
CVE-2025-25947 can enable denial of service attacks by causing an application crash through specially crafted MP4 files.
Which versions of Bento4 are affected by CVE-2025-25947?
CVE-2025-25947 affects Bento4 version v1.6.0-641 and possibly earlier versions.
How can I determine if my system is vulnerable to CVE-2025-25947?
You can determine if your system is vulnerable to CVE-2025-25947 by checking the Bento4 version you have installed and reviewing any incident reports related to the use of mp4encrypt.