CVE-2023-38666

MediumCVSS 5.5

Published: 22/08/2023(UTC)Updated: 17/06/2026(UTC)Translated: 19/06/2026(UTC)NVD NIST

Exploitation Probability (EPSS)

Low risk

0.26%

17th percentile - higher than 17% of all known CVEs

Bento4 v1.6.0-639 was discovered to contain a segmentation violation via the AP4_Processor::ProcessFragments function in mp4encrypt.

The segmentation violation may lead to unexpected application behavior, posing risks to data integrity and system stability.

It is recommended to update to the latest version of Bento4 to mitigate this vulnerability.

Original NVD description (English source)

Bento4 v1.6.0-639 was discovered to contain a segmentation violation via the AP4_Processor::ProcessFragments function in mp4encrypt.