PT-2019-16089
CVE-2019-20091
·
Published
2019-12-30
·
Updated
2020-01-07
Description by
CVSS 3.1
5.5
MediumMetricsAV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H
Name of the Vulnerable Software and Affected Versions
Bento4 version 1.5.1.0
Description
A NULL pointer dereference issue was discovered in the
AP4 Descriptor::GetTag function when called from AP4 DecoderConfigDescriptor::GetDecoderSpecificInfoDescriptor in Ap4DecoderConfigDescriptor.cpp, potentially leading to a crash or other unintended behavior.Recommendations
For Bento4 version 1.5.1.0, at the moment, there is no information about a newer version that contains a fix for this issue.
Exploitability
Exploit
Fix
Impacts
Researchers
Vendors
Affected products
Found an issue in the description? Have something to add? Feel free to write us 👾