medium6.5
CVE-2017-14645
A heap-based buffer over-read was discovered in AP4_BitStream::ReadBytes in Codecs/Ap4BitStream.cpp in Bento4 version 1.5.0-617.
Impact
A heap-based buffer over-read was discovered in AP4_BitStream::ReadBytes in Codecs/Ap4BitStream.cpp in Bento4 version 1.5.0-617. The vulnerability causes an application crash, which leads to remote denial of service.
Affected products
| Vendor | Product | Affected versions |
|---|---|---|
| Bento4 | Bento4 | Version 1.5.0-617 |