PT-2017-13599
CVE-2017-14638
·
Published
2017-09-21
·
Updated
2017-09-28
Description by
CVSS 3.1
6.5
MediumMetricsAV:N/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H
Name of the Vulnerable Software and Affected Versions
Bento4 version 1.5.0-617
Description
The issue is related to missing NULL checks in the AP4 AtomFactory::CreateAtomFromStream function, which can lead to a NULL pointer dereference, resulting in a segmentation fault and application crash in the AP4 Atom::SetType function.
Recommendations
For Bento4 version 1.5.0-617, consider adding NULL checks to the AP4 AtomFactory::CreateAtomFromStream function to prevent NULL pointer dereferences. As a temporary workaround, restrict the use of the AP4 AtomFactory::CreateAtomFromStream function until a patch is available.
Exploitability
Exploit
Fix
Impacts
Researchers
Vendors
Affected products
Found an issue in the description? Have something to add? Feel free to write us 👾