CVE-2026-88376: Integer Underflow
Bento4 1.6.0.0 contains an integer underflow vulnerability in AP4AvccAtom::Create() and AP4HvccAtom::Create(). A specially crafted MP4 file containing an avcC or hvcC atom with a declared size smaller than the atom header size can cause the payload-size calculation to wrap to a large unsigned value. The resulting invalid buffer allocation and copy operations can cause application termination, leading to denial of service.
Affected Software
Event History
Frequently Asked Questions
What input must an attacker provide to trigger the issue?
The attacker must cause the application to process a specially crafted MP4 file containing an avcC or hvcC atom whose declared size is smaller than the atom header size.
What is the practical impact of successful exploitation?
The malformed atom can make the payload-size calculation wrap to a large unsigned value, resulting in invalid buffer allocation and copy operations. This can terminate the application and cause denial of service.