Vulnerabilities > CVE-2019-20091 - NULL Pointer Dereference vulnerability in Axiosys Bento4 1.5.1.0
Attack vector
NETWORK Attack complexity
MEDIUM Privileges required
NONE Confidentiality impact
NONE Integrity impact
NONE Availability impact
PARTIAL Summary
An issue was discovered in Bento4 1.5.1.0. There is a NULL pointer dereference in AP4_Descriptor::GetTag in mp42ts when called from AP4_DecoderConfigDescriptor::GetDecoderSpecificInfoDescriptor in Ap4DecoderConfigDescriptor.cpp.
Vulnerable Configurations
Part | Description | Count |
---|---|---|
Application | 1 |