CVE-2018-10790

Name of the Vulnerable Software and Affected Versions Bento4 version 1.5.1.0

Description The issue allows remote attackers to cause a denial of service, resulting in an application crash. This is related to a memory allocation failure in the AP4 CttsAtom class, located in Core/Ap4CttsAtom.cpp. The vulnerability can be demonstrated using mp2aac.

Recommendations For Bento4 version 1.5.1.0, consider updating to a newer version that addresses the memory allocation failure issue in the AP4 CttsAtom class. As a temporary workaround, restrict the use of the AP4 CttsAtom class to minimize the risk of exploitation.