CVE-2019-8378

An issue was discovered in Bento4 1.5.1-628. A heap-based buffer over-read exists in AP4BitStream::ReadBytes in Codecs/Ap4BitStream.cpp, a similar issue to CVE-2017-14645. It can be triggered by sending a crafted file to the aac2mp4 binary. It allows an attacker to cause a Denial of Service...

CVE-2019-8379

An issue was discovered in AdvanceCOMP through 2.1. A NULL pointer dereference exists in the function beuint32read located in endianrw.h. It can be triggered by sending a crafted file to a binary. It allows an attacker to cause a Denial of Service Segmentation fault or possibly have unspecified...

CVE-2019-8379

CVE-2019-8379: In AdvanceCOMP up to 2.1, a NULL pointer dereference in be_uint32_read() in endianrw.h can be triggered by opening a specially crafted file, enabling a Denial of Service (segmentation fault) or other impact. Public records in Debian/Ubuntu advisories and various Nessus plugins conf...

CVE-2019-8382

Bento4 1.5.1-628 contains a NULL pointer dereference in AP4_List:Find (Core/Ap4List.h) when invoked from Core/Ap4Movie.cpp, exploitable by feeding a crafted file to the mp4dump tool. The issue can trigger a Denial of Service (segmentation fault) and may have unspecified other impact. Affected com...

CVE-2019-8382

An issue was discovered in Bento4 1.5.1-628. A NULL pointer dereference occurs in the function AP4List:Find located in Core/Ap4List.h when called from Core/Ap4Movie.cpp. It can be triggered by sending a crafted file to the mp4dump binary. It allows an attacker to cause a Denial of Service...

CVE-2019-8382

An issue was discovered in Bento4 1.5.1-628. A NULL pointer dereference occurs in the function AP4List:Find located in Core/Ap4List.h when called from Core/Ap4Movie.cpp. It can be triggered by sending a crafted file to the mp4dump binary. It allows an attacker to cause a Denial of Service...

CVE-2019-8380

An issue was discovered in Bento4 1.5.1-628. A NULL pointer dereference occurs in AP4Track::GetSampleIndexForTimeStampMs located in Core/Ap4Track.cpp. It can triggered by sending a crafted file to the mp4audioclip binary. It allows an attacker to cause a Denial of Service Segmentation fault or...

CVE-2019-8383

AdvanceCOMP vulnerability CVE-2019-8383: an invalid memory address in adv_png_unfilter_8 (lib/png.c) can be triggered by a crafted file, allowing a Denial of Service (segmentation fault) or unspecified impact when opened. Public advisories (Debian, Mageia, Red Hat/CentOS, Fedora) document this is...

CVE-2019-8378

The CVE-2019-8378 entry covers Bento4 1.5.1-628 with a heap-based buffer over-read in AP4_BitStream::ReadBytes() (Codecs/Ap4BitStream.cpp). A crafted file sent to the aac2mp4 binary can trigger a Segmentation fault, causing a Denial of Service, with possible unspecified other impact. Connected re...

CVE-2019-8380

Bento4 1.5.1-628 contains a NULL pointer dereference in AP4_Track::GetSampleIndexForTimeStampMs() (Core/Ap4Track.cpp). A crafted MP4 file sent to the mp4audioclip binary can trigger a crash, causing a Denial of Service (segmentation fault) and possibly other impact. The provided connected sources...

CVE-2019-8381

An issue was discovered in Tcpreplay 4.3.1. An invalid memory access occurs in dochecksum in checksum.c. It can be triggered by sending a crafted pcap file to the tcpreplay-edit binary. It allows an attacker to cause a Denial of Service Segmentation fault or possibly have unspecified other impact...

CVE-2019-8377

An issue was discovered in Tcpreplay 4.3.1. A NULL pointer dereference occurred in the function getipv6l4proto located at get.c. This can be triggered by sending a crafted pcap file to the tcpreplay-edit binary. It allows an attacker to cause a Denial of Service Segmentation fault or possibly hav...

CVE-2019-8377

Tcpreplay 4.3.1 is affected by CVE-2019-8377 due to a NULL pointer dereference in get_ipv6_l4proto() in get.c when parsing a crafted pcap fed to tcpreplay-edit. This can trigger a Denial of Service via segmentation fault and may have unspecified other impact. Public remediation in the connected s...

CVE-2019-8377

An issue was discovered in Tcpreplay 4.3.1. A NULL pointer dereference occurred in the function getipv6l4proto located at get.c. This can be triggered by sending a crafted pcap file to the tcpreplay-edit binary. It allows an attacker to cause a Denial of Service Segmentation fault or possibly hav...

CVE-2019-8376

An issue was discovered in Tcpreplay 4.3.1. A NULL pointer dereference occurred in the function getlayer4v6 located at get.c. This can be triggered by sending a crafted pcap file to the tcpreplay-edit binary. It allows an attacker to cause a Denial of Service Segmentation fault or possibly have...

CVE-2019-8383

An issue was discovered in AdvanceCOMP through 2.1. An invalid memory address occurs in the function advpngunfilter8 in lib/png.c. It can be triggered by sending a crafted file to a binary. It allows an attacker to cause a Denial of Service Segmentation fault or possibly have unspecified other...

CVE-2019-8376

An issue was discovered in Tcpreplay 4.3.1. A NULL pointer dereference occurred in the function getlayer4v6 located at get.c. This can be triggered by sending a crafted pcap file to the tcpreplay-edit binary. It allows an attacker to cause a Denial of Service Segmentation fault or possibly have...

CVE-2019-8381

An issue was discovered in Tcpreplay 4.3.1. An invalid memory access occurs in dochecksum in checksum.c. It can be triggered by sending a crafted pcap file to the tcpreplay-edit binary. It allows an attacker to cause a Denial of Service Segmentation fault or possibly have unspecified other impact...

CVE-2019-8383: Improper Restriction of Operations within the Bounds of a Memory Buffer

An issue was discovered in AdvanceCOMP through 2.1. An invalid memory address occurs in the function advpngunfilter8 in lib/png.c. It can be triggered by sending a crafted file to a binary. It allows an attacker to cause a Denial of Service Segmentation fault or possibly have unspecified other...

PT-2019-18999

Name of the Vulnerable Software and Affected Versions Bento4 version 1.5.1-628 Description A NULL pointer dereference issue occurs in the AP4 Track::GetSampleIndexForTimeStampMs function, located in Core/Ap4Track.cpp, which can be triggered by sending a crafted file to the mp4audioclip binary. Th...