Vulnerabilities > CVE-2019-20090 - Use After Free vulnerability in Axiosys Bento4 1.5.1.0

047910
CVSS 7.8 - HIGH
Attack vector
LOCAL
Attack complexity
LOW
Privileges required
NONE
Confidentiality impact
HIGH
Integrity impact
HIGH
Availability impact
HIGH
local
low complexity
axiosys
CWE-416

Summary

An issue was discovered in Bento4 1.5.1.0. There is a use-after-free in AP4_Sample::GetOffset in Core/Ap4Sample.h when called from Ap4LinearReader.cpp.

Vulnerable Configurations

Part Description Count
Application
Axiosys
1

Common Weakness Enumeration (CWE)