ZeroHour

CVE-2018-14545

CVSS 3.0
5.5 medium
EPSS
<1%p56
Published
()
Modified
Description

There exists one invalid memory read bug in AP4_SampleDescription::GetType() in Ap4SampleDescription.h in Bento4 1.5.1-624, which can allow attackers to cause a denial-of-service via a crafted mp4 file. This vulnerability can be triggered by the executable mp42ts.

Vendors
axiosys
Products
bento4
Weakness
CWE-125
Vector
CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H

In the news

No ingested article mentions this CVE yet.