Vulnerabilities > CVE-2019-20091 - NULL Pointer Dereference vulnerability in Axiosys Bento4 1.5.1.0
Attack vector
LOCAL Attack complexity
LOW Privileges required
NONE Confidentiality impact
NONE Integrity impact
NONE Availability impact
HIGH Summary
An issue was discovered in Bento4 1.5.1.0. There is a NULL pointer dereference in AP4_Descriptor::GetTag in mp42ts when called from AP4_DecoderConfigDescriptor::GetDecoderSpecificInfoDescriptor in Ap4DecoderConfigDescriptor.cpp.
Vulnerable Configurations
| Part | Description | Count |
|---|---|---|
| Application | 1 |