CVE-2025-25942

n/a / n/a PUBLISHED

Description (CNA)

An issue in Bento4 v1.6.0-641 allows an attacker to obtain sensitive information via the the mp4fragment tool when processing invalid files. Specifically, memory allocated in SampleArray::SampleArray in Mp4Fragment.cpp is not properly released.

Affected (CNA)

Vendor / product	Versions
n/a / n/a	affected n/a

CWE

No CWE identifiers supplied.

References

https://github.com/axiomatic-systems/Bento4/issues/993

ADP enrichment

CISA-ADP

No English description supplied.

No references supplied.