Giters

axiomatic-systems / Bento4

Full-featured MP4 format, MPEG DASH, HLS, CMAF SDK and tools

Home Page:http://www.bento4.com

Geek Repo:Geek Repo

Github PK Tool:Github PK Tool

Out-Of-Bounds read in Ap4Stz2Atom

QWeiheng opened this issue · comments

commented

Hello,

I find that in the AP4_Stz2Atom::AP4_Stz2Atom function, the sample_count obtained through stream.ReadUI08 may lack proper range validation. This can lead to a heap out-of-bounds read when calling AP4_BytesToUInt16BE, triggering a segment fault.

./mp42aac poc out

poc.zip