CVE-2024-57598
MediumCVSS 6.5Exploitation Probability (EPSS)
Low risk35th percentile - higher than 35% of all known CVEs
Summary
A floating point exception (divide-by-zero) vulnerability was discovered in Bento4 1.6.0-641 in the AP4_TfraAtom() function of Ap4TfraAtom.cpp. A remote attacker can exploit this flaw to cause a denial of service (DoS).
Risk Assessment
The risk is that a remote attacker can crash the application, leading to service disruption and potential loss of availability for users.
Recommendation
It is recommended to immediately update Bento4 to the latest version that fixes the divide-by-zero issue. If not available, restrict access to the application or apply temporary mitigations.
Original NVD description (English source)
A floating point exception (divide-by-zero) vulnerability was discovered in Bento4 1.6.0-641 in function AP4_TfraAtom() of Ap4TfraAtom.cpp which allows a remote attacker to cause a denial of service vulnerability.