high7.5
CVE-2019-13238
An issue was discovered in Bento4 1.5.1.0.
Impact
An issue was discovered in Bento4 1.5.1.0. A memory allocation failure is unhandled in Core/Ap4SdpAtom.cpp and leads to crashes. When parsing input video, the program allocates a new buffer to parse an atom in the stream. The unhandled memory allocation failure causes a direct copy to a NULL pointer.
Affected products
| Vendor | Product | Affected versions |
|---|---|---|
| Axiosys | Bento4 | Version 1.5.1.0 |