CVE-2025-25946

Summary

CVE-2025-25946 is a vulnerability affecting Bento4 v1.6.0-641. An attacker can cause a memory leak by providing a specially crafted MP4 input file to the mp4encrypt function. This issue is located in the Ap4Marlin.cpp and Ap4Processor.cpp files, specifically in the AP4_MarlinIpmpEncryptingProcessor::Initialize and AP4_Processor::Process functions. The memory leak occurs during the execution of these functions. Successful exploitation of this vulnerability could lead to denial of service or potential application crashes.

Prevent cyber attacks with Recorded Future by prioritizing and patching critical vulnerabilities being exploited by threat actors targeting your industry. Book your demo to learn more.