PT-2022-25533

CVE-2022-40774

Published

2022-09-18

Updated

2024-04-08

Description by

CVSS 3.1

5.5

Medium

MetricsAV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H

Name of the Vulnerable Software and Affected Versions Bento4 versions 1.6.0-639 and earlier

Description An issue was discovered in Bento4, where there is a NULL pointer dereference in the AP4 StszAtom::GetSampleSize function.

Recommendations For Bento4 versions 1.6.0-639 and earlier, consider disabling the AP4 StszAtom::GetSampleSize function until a patch is available. At the moment, there is no information about a newer version that contains a fix for this vulnerability.

Exploitability

Exploit

Impacts

Researchers

Han Zheng

Wanying Cao

Vendors

Affected products

Weakness enumeration

CWE-476: NULL Pointer Dereference

Related identifiers

CVE-2022-40774