← Database

CVE-2025-25945

MEDIUM CVSS: 6.5 Published: 2025-02-19 Modified: 2026-06-17

Description

An issue in Bento4 v1.6.0-641 allows an attacker to obtain sensitive information via the the Mp4Fragment.cpp and in AP4_DescriptorFactory::CreateDescriptorFromStream at Ap4DescriptorFactory.cpp.

Affected Platforms

Axiosys Bento4

Weakness Type

CWE-200

References