Lucene search

K
cnvdChina National Vulnerability DatabaseCNVD-2023-00387
HistoryAug 18, 2021 - 12:00 a.m.

Bento4 Denial of Service Vulnerability (CNVD-2023-00387)

2021-08-1800:00:00
China National Vulnerability Database
www.cnvd.org.cn
4

0.001 Low

EPSS

Percentile

44.9%

Bento4 is an open source C library for reading and writing MP4 files.A denial of service vulnerability exists in versions prior to Bento4 1.6.0-635. The vulnerability stems from a null pointer dereference in the AP4_Stz2Atom::GetSampleSize component of /Core/Ap4Stz2Atom.cpp. An attacker could exploit this vulnerability to cause a denial of service impact.

0.001 Low

EPSS

Percentile

44.9%