NetSight
medium5.5

CVE-2019-20091

An issue was discovered in Bento4 1.5.1.0.

Impact

An issue was discovered in Bento4 1.5.1.0. There is a NULL pointer dereference in AP4_Descriptor::GetTag in mp42ts when called from AP4_DecoderConfigDescriptor::GetDecoderSpecificInfoDescriptor in Ap4DecoderConfigDescriptor.cpp.

Affected products

VendorProductAffected versions
AxiosysBento4
Version 1.5.1.0

Weakness classification

References