CVE-2020-19720

Bento4 (open source C++ library for MP4) is affected by CVE-2020-19720 due to an unhandled memory allocation failure in Core/AP4IkmsAtom.cpp, causing a NULL pointer dereference and a denial of service. The vulnerability is demonstrated in Bento4 version 1.5.1-628. Connected sources indicate a buf...