CVE-2025-0870 | Axiomatic Bento4 up to 1.6.0-641 Ap4DataBuffer.h AP4_DataBuffer::GetData heap-based overflow

A vulnerability was found in Axiomatic Bento4 up to 1.6.0-641. It has been rated as critical. Affected by this issue is the function AP4_DataBuffer::GetData in the library Ap4DataBuffer.h. The manipulation leads to heap-based buffer overflow.

This vulnerability is handled as CVE-2025-0870. The attack may be launched remotely. Furthermore, there is an exploit available.

This product is using a rolling release to provide continious delivery. Therefore, no version details for affected nor updated releases are available.