CVE:CVE-2022-41847
CNNVD:CNNVD-202209-3129
Bento4是一款用于读写MP4文件的开源的C++库。
Bento4 1.6.0-639版本存在安全漏洞，该漏洞源于System/StdC/Ap4StdCFileByteStream.cpp中的AP4_StdcFileByteStream::Create(AP4_FileByteStream*, char const*, AP4_FileByteStream::Mode, AP4_ByteStream*&)函数存在内存泄漏问题。
solution:Upgrade axiosys bento4 to a higher version than 1.6.0-639,and avoid the version 1.6.0-639