CVE-2018-14544

There exists one invalid memory read bug in AP4_SampleDescription::GetFormat() in Ap4SampleDescription.h in Bento4 1.5.1-624, which can allow attackers to cause a denial-of-service via a crafted mp4 file. This vulnerability can be triggered by the executable mp42ts.
References
Link Resource
https://github.com/axiomatic-systems/Bento4/issues/291 Third Party Advisory
Configurations

Configuration 1

cpe:2.3:a:axiosys:bento4:1.5.1-624:*:*:*:*:*:*:*

Information

Published : 2018-07-23 08:29

Updated : 2018-09-19 05:52


NVD link : CVE-2018-14544

Mitre link : CVE-2018-14544

Products Affected
No products.
CWE
CWE-125

Out-of-bounds Read