CVE-2020-19722

Name of the Vulnerable Software and Affected Versions: Bento version 1.5.1-628

Description: The issue is caused by an unhandled memory allocation failure in Core/Ap4Atom.cpp, leading to a direct copy to a NULL pointer dereference. This results in a denial of service (DOS).

Recommendations: For Bento version 1.5.1-628, consider restricting access to the Core/Ap4Atom.cpp module to minimize the risk of exploitation until a patch is available. At the moment, there is no information about a newer version that contains a fix for this vulnerability.