CVE-2025-25945

Summary

CVE-2025-25945 is a newly disclosed vulnerability affecting Bento4 version 1.6.0-641. This issue grants attackers the ability to extract sensitive data by exploiting weaknesses in the Mp4Fragment.cpp file and the AP4_DescriptorFactory::CreateDescriptorFromStream function located in Ap4DescriptorFactory.cpp. By leveraging these vulnerabilities, attackers can gain unauthorized access to confidential information. The exact nature of the data that can be obtained is not yet clear, but the potential implications for security are significant. Users are urged to update their software as soon as possible to mitigate the risk of this vulnerability.

Prevent cyber attacks with Recorded Future by prioritizing and patching critical vulnerabilities being exploited by threat actors targeting your industry. Book your demo to learn more.