High severity7.5NVD Advisory· Published Sep 21, 2017· Updated Jun 17, 2026

CVE-2017-14646

Description

The AP4_AvccAtom and AP4_HvccAtom classes in Bento4 version 1.5.0-617 do not properly validate data sizes, leading to a heap-based buffer over-read and application crash in AP4_DataBuffer::SetData in Core/Ap4DataBuffer.cpp.

AI Insight

LLM-synthesized narrative grounded in this CVE's description and references.

Affected products

Bento4/Bento42 versions
cpe:2.3:a:axiosys:bento4:1.5.0-617:*:*:*:*:*:*:*+ 1 more
- cpe:2.3:a:axiosys:bento4:1.5.0-617:*:*:*:*:*:*:*
- (no CPE)range: 1.5.0-617

Patches

Vulnerability mechanics

References

github.com/axiomatic-systems/Bento4/commit/53499d8d4c69142137c7c7f0097a444783fdeb90nvdPatchThird Party Advisory
blogs.gentoo.org/ago/2017/09/14/bento4-heap-based-buffer-overflow-in-ap4_databuffersetdata-ap4databuffer-cpp/nvdExploitIssue TrackingPatchThird Party AdvisoryVDB Entry
github.com/axiomatic-systems/Bento4/issues/188nvdExploitThird Party Advisory

News mentions

No linked articles in our index yet.

cvss	0.488
epss	0.002
exploit	0.000
kev	0.000
patch	0.000
ransomware	0.000