CVE-2017-14639

Name: CVE-2017-14639
Creator: NVD / NIST
Published: 2017-09-21T17:29:00.2+00:00
License: https://creativecommons.org/publicdomain/zero/1.0/

UnknownEPSS 1.70%

Last modified Jun 17, 2026

CVE-2017-14639 is a vulnerability of currently unknown severity. AP4_VisualSampleEntry::ReadFields in Core/Ap4SampleEntry.cpp in Bento4 1.5.0-617 uses incorrect character data types, which causes a stack-based buffer underflow and out-of-bounds write, leading to denial of service (application crash) or possibly unspecified other impact.. EPSS estimates a 1.70% chance of exploitation in the next 30 days.

Description

AP4_VisualSampleEntry::ReadFields in Core/Ap4SampleEntry.cpp in Bento4 1.5.0-617 uses incorrect character data types, which causes a stack-based buffer underflow and out-of-bounds write, leading to denial of service (application crash) or possibly unspecified other impact.

Metrics

EPSS Probability

1.70%

74.3th percentile

Probability of exploitation in the next 30 days. Learn more

Weakness Enumeration

CWE-843

Affected Software

Vendor	Product	Versions
Bento4	Bento4	1.5.0-617

References

https://blogs.gentoo.org/ago/2017/09/14/bento4-stack-based-buffer-underflow-in-ap4_visualsampleentryreadfields-ap4sampleentry-cpp/Exploit, Issue Tracking, Patch, Third Party Advisory, VDB Entry
https://github.com/axiomatic-systems/Bento4/commit/03d1222ab9c2ce779cdf01bdb96cdd69cbdcfedaPatch, Third Party Advisory
https://github.com/axiomatic-systems/Bento4/issues/190Exploit, Third Party Advisory
https://blogs.gentoo.org/ago/2017/09/14/bento4-stack-based-buffer-underflow-in-ap4_visualsampleentryreadfields-ap4sampleentry-cpp/Exploit, Issue Tracking, Patch, Third Party Advisory, VDB Entry
https://github.com/axiomatic-systems/Bento4/commit/03d1222ab9c2ce779cdf01bdb96cdd69cbdcfedaPatch, Third Party Advisory
https://github.com/axiomatic-systems/Bento4/issues/190Exploit, Third Party Advisory

Timeline

Published: Sep 21, 2017
Last Modified: Jun 17, 2026
Status: Modified

Frequently Asked Questions

What is CVE-2017-14639?

How severe is CVE-2017-14639?

Severity scoring for CVE-2017-14639 is pending analysis. The EPSS model estimates a 1.70% probability of exploitation in the next 30 days.

How do I fix CVE-2017-14639?

Check the vendor references and advisories linked above for patched versions and mitigation guidance. You can also run a Strix scan to test if your systems are affected.

Are you affected by CVE-2017-14639?

Run a free Strix scan to check your systems for this vulnerability.

Scan your code now

Source: NVD / NIST