PT-2022-26092

CVE-2022-41841

Published

2022-09-30

Updated

2025-05-20

Description by

CVSS 3.1

5.5

Medium

MetricsAV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H

Name of the Vulnerable Software and Affected Versions Bento4 versions through 1.6.0-639

Description A NULL pointer dereference issue occurs in the AP4 File::ParseStream function, located in Core/Ap4File.cpp, which is called from AP4 File::AP4 File.

Recommendations For versions through 1.6.0-639, consider updating to a version that fixes this issue, as no specific mitigation measures are provided for these versions. At the moment, there is no information about a newer version that contains a fix for this vulnerability.

Exploitability

Exploit

Impacts

Researchers

Vendors

Affected products

Weakness enumeration

CWE-476: NULL Pointer Dereference