All issues

[Bug]Heap out-of-bounds write in AP4_Dac4Atom when copying AC-4 alternative_info.presentation_name (CWE-787)

#1093

· 1820893135-pixel opened

on Aug 7, 2026

[Bug]Deterministic crash in avcC/hvcC configuration-atom parsing (AP4_AvccAtom / AP4_HvccAtom) via null pointer in AP4_DataBuffer copy (CWE-787)

#1092

· 1820893135-pixel opened

on Aug 7, 2026

[Bug]Deterministic SIGILL in avcC/hvcC configuration-atom parsing (AP4_AvccAtom / AP4_HvccAtom) via unvalidated atom size (CWE-787)

#1091

· 1820893135-pixel opened

on Aug 7, 2026

Bento4/mp4encrypt: NULL Pointer Dereference in AP4_Processor::ProcessFragments (moov child iteration) when parsing crafted MP4

#1089

· Criticayon opened

on Jul 22, 2026

oob-write: Heap corruption in `AP4_DataBuffer_SetBuffer` via mismatched size parameter

#1088

· sgzeng opened

on Jul 20, 2026

Integer Overflow: vps_num_layer_sets_minus1 overflow in AP4_HevcVideoParameterSet::Parse

#1087

· sgzeng opened

on Jul 20, 2026

oob-read/stack-overflow: Stack overflow in `AP4_File::SetFileType` via unchecked `compatible_brand_count`

#1086

· sgzeng opened

on Jul 20, 2026

Integer Overflow in PicSizeInCtbsY Leads to Signed Shift UB

#1085

· sgzeng opened

on Jul 20, 2026

Use-After-Free: PSSH atom double-delete in DoRemove()

#1084

· sgzeng opened

on Jul 20, 2026

Integer Overflow in AddH264DoviTrack Frame Rate Calculation

#1083

· sgzeng opened

on Jul 20, 2026

int-overflow: Integer underflow in ADTS frame length — `frame_length - 7` wraps when `frame_length < 7`

#1082

· sgzeng opened

on Jul 20, 2026

int-overflow: Integer underflow in `GetAvailable()` when stream position exceeds size

#1081

· sgzeng opened

on Jul 20, 2026