CVE-2019-20090

Bento4 1.5.1.0 contains a use-after-free in AP4_Sample::GetOffset (Core/Ap4Sample.h) when invoked from Ap4LinearReader.cpp. This is the concrete root cause described in the CVE entry. The issue affects Bento4’s MP4 parsing/writing runtime, enabling an attacker-controlled scenario to potentially t...

CVE-2019-20090: Use After Free

An issue was discovered in Bento4 1.5.1.0. There is a use-after-free in AP4Sample::GetOffset in Core/Ap4Sample.h when called from Ap4LinearReader.cpp...

Bento4 Post-Release Reuse Vulnerability

Bento4 is an open source C++ library for reading and writing MP4 files. A resource management error vulnerability exists in the 'AP4Sample::GetOffset' function of the Core/Ap4Sample.h file in Bento4 version 1.5.1.0. The vulnerability stems from mismanagement of system resources e.g., memory, disk...