CVE:CVE-2022-40737
CNNVD:CNNVD-202209-1076
Bento4是一款用于读写MP4文件的开源的C++库。
Bento4 1.6.0-639版本存在安全漏洞，该漏洞源于其AP4_ByteStream::Write和AP4_HdlrAtom::WriteFields组件调用System/StdC/Ap4StdCFileByteStream.cpp组件中的AP4_StdcFileByteStream::WritePartial函数时可能会出现缓冲区越界读取。
solution:Upgrade axiosys bento4 to a higher version than 1.6.0-639,and avoid the version (,1.6.0-639]