Null pointer dereference

An issue was discovered in Bento4 1.5.1.0. There is a NULL pointer dereference in AP4Descriptor::GetTag in mp42ts when called from AP4DecoderConfigDescriptor::GetDecoderSpecificInfoDescriptor in Ap4DecoderConfigDescriptor.cpp...

CVE-2019-20092

An issue was discovered in Bento4 1.5.1.0. There is a NULL pointer dereference in AP4Descriptor::GetTag in mp42ts when called from AP4EsDescriptor::GetDecoderConfigDescriptor in Ap4EsDescriptor.cpp...

UBUNTU-CVE-2019-20091

An issue was discovered in Bento4 1.5.1.0. There is a NULL pointer dereference in AP4Descriptor::GetTag in mp42ts when called from AP4DecoderConfigDescriptor::GetDecoderSpecificInfoDescriptor in Ap4DecoderConfigDescriptor.cpp...

CVE-2019-20090

An issue was discovered in Bento4 1.5.1.0. There is a use-after-free in AP4Sample::GetOffset in Core/Ap4Sample.h when called from Ap4LinearReader.cpp...

CVE-2019-20090

Bento4 1.5.1.0 contains a use-after-free in AP4_Sample::GetOffset (Core/Ap4Sample.h) when invoked from Ap4LinearReader.cpp. This is the concrete root cause described in the CVE entry. The issue affects Bento4’s MP4 parsing/writing runtime, enabling an attacker-controlled scenario to potentially t...

CVE-2019-20091

CVE-2019-20091 affects Bento4 1.5.1.0. The issue is a NULL pointer dereference in AP4_Descriptor::GetTag within mp42ts, triggered via AP4_DecoderConfigDescriptor::GetDecoderSpecificInfoDescriptor in Ap4DecoderConfigDescriptor.cpp. Documented impact includes potential instability (CVSS metrics ind...

CVE-2019-20091

An issue was discovered in Bento4 1.5.1.0. There is a NULL pointer dereference in AP4Descriptor::GetTag in mp42ts when called from AP4DecoderConfigDescriptor::GetDecoderSpecificInfoDescriptor in Ap4DecoderConfigDescriptor.cpp...

CVE-2019-20092

Bento4 1.5.1.0 is affected by CVE-2019-20092 due to a NULL pointer dereference in AP4_Descriptor::GetTag within mp42ts, triggered via AP4_EsDescriptor::GetDecoderConfigDescriptor (Ap4EsDescriptor.cpp). The connected sources specify the exact functions and file path involved, but do not provide a ...

CVE-2019-20092

An issue was discovered in Bento4 1.5.1.0. There is a NULL pointer dereference in AP4Descriptor::GetTag in mp42ts when called from AP4EsDescriptor::GetDecoderConfigDescriptor in Ap4EsDescriptor.cpp...

Bento4 Null Pointer Dereference Vulnerability (CNVD-2020-03870)

Bento4 is an open source C++ library for reading and writing MP4 files. A code issue vulnerability exists in the 'AP4Descriptor::GetTag' function in Bento4 version 1.5.1.0. The vulnerability stems from an improperly designed or implemented code development process for a networked system or produc...

Bento4 Null Pointer Dereference Vulnerability (CNVD-2020-03869)

Bento4 is an open source C++ library for reading and writing MP4 files. A code issue vulnerability exists in the 'AP4Descriptor::GetTag' function in Bento4 version 1.5.1.0. The vulnerability stems from an improperly designed or implemented code development process for a networked system or produc...

Bento4 Post-Release Reuse Vulnerability

Bento4 is an open source C++ library for reading and writing MP4 files. A resource management error vulnerability exists in the 'AP4Sample::GetOffset' function of the Core/Ap4Sample.h file in Bento4 version 1.5.1.0. The vulnerability stems from mismanagement of system resources e.g., memory, disk...

Bento4 'AP4_TfhdAtom::SetDefaultSampleSize' function buffer overflow vulnerability

Bento4 is an open source C++ library for reading and writing MP4 files. A buffer overflow vulnerability exists in the 'AP4TfhdAtom::SetDefaultSampleSize' function in the Core/Ap4TfhdAtom.h file in Bento4 version 1.5.1.0. The vulnerability stems from a networked system or product performing...

Bento4 'AP4_CencSampleEncryption::DoInspectFields' function buffer overflow vulnerability

Bento4 is an open source C++ library for reading and writing MP4 files. A buffer overflow vulnerability exists in the 'AP4CencSampleEncryption::DoInspectFields' function in the Core/Ap4CommonEncryption.cpp file in Bento4 version 1.5.1.0. The vulnerability stems from a network system or product...

Bento4 'AP4_PrintInspector::AddField' function buffer overflow vulnerability

Bento4 is an open source C++ library for reading and writing MP4 files. A buffer overflow vulnerability exists in the 'AP4PrintInspector::AddField' function in the Core/Ap4Atom.cpp file in Bento4 version 1.5.1.0. The vulnerability stems from a networked system or product performing operations in...

CVE-2019-17529

An issue was discovered in Bento4 1.5.1.0. There is a heap-based buffer over-read in AP4CencSampleEncryption::DoInspectFields in Core/Ap4CommonEncryption.cpp when called from AP4Atom::Inspect in Core/Ap4Atom.cpp...

CVE-2019-17529

An issue was discovered in Bento4 1.5.1.0. There is a heap-based buffer over-read in AP4CencSampleEncryption::DoInspectFields in Core/Ap4CommonEncryption.cpp when called from AP4Atom::Inspect in Core/Ap4Atom.cpp...

CVE-2019-17530

An issue was discovered in Bento4 1.5.1.0. There is a heap-based buffer over-read in AP4PrintInspector::AddField in Core/Ap4Atom.cpp when called from AP4CencSampleEncryption::DoInspectFields in Core/Ap4CommonEncryption.cpp, when called from AP4Atom::Inspect in Core/Ap4Atom.cpp...

CVE-2019-17528

An issue was discovered in Bento4 1.5.1.0. There is a SEGV in the function AP4TfhdAtom::SetDefaultSampleSize at Core/Ap4TfhdAtom.h when called from AP4Processor::ProcessFragments in Core/Ap4Processor.cpp...

CVE-2019-17530

An issue was discovered in Bento4 1.5.1.0. There is a heap-based buffer over-read in AP4PrintInspector::AddField in Core/Ap4Atom.cpp when called from AP4CencSampleEncryption::DoInspectFields in Core/Ap4CommonEncryption.cpp, when called from AP4Atom::Inspect in Core/Ap4Atom.cpp...