CVE-2025-25943

Buffer Overflow vulnerability in Bento4 v.1.6.0-641 allows a local attacker to execute arbitrary code via the AP4_Stz2Atom::AP4_Stz2Atom component located in Ap4Stz2Atom.cpp.

Score

CVSS 3.1 7.8 High

Status

Analyzed - cve@mitre.org

Published

2025-02-19

Last modified

2025-02-20

Weaknesses

CWE-94

Affected products

• Bento4 (Axiosys)

References

• https://github.com/axiomatic-systems/Bento4/issues/993