Linux Distros Unpatched Vulnerability : CVE-2018-20186

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - An issue was discovered in Bento4 1.5.1-627. AP4Sample::ReadData in Core/Ap4Sample.cpp allows attackers to trigger an attempted excessive memory allocation,...

Null pointer dereference

In Bento4 1.5.1-627, AP4DataBuffer::SetDataSize does not handle reallocation failures, leading to a memory copy into a NULL pointer. This is different from CVE-2018-20186...

CVE-2018-20186

CVE-2018-20186 affects Bento4 1.5.1-627. The issue is in AP4_Sample::ReadData in Core/Ap4Sample.cpp, which allows attackers to trigger an attempted excessive memory allocation via AP4_DataBuffer::SetDataSize and AP4_DataBuffer::ReallocateBuffer in Core/Ap4DataBuffer.cpp. The documented impact is ...