Vulnerabilities > CVE-2022-41841 - NULL Pointer Dereference vulnerability in Axiosys Bento4

047910
CVSS 5.5 - MEDIUM
Attack vector
LOCAL
Attack complexity
LOW
Privileges required
NONE
Confidentiality impact
NONE
Integrity impact
NONE
Availability impact
HIGH
local
low complexity
axiosys
CWE-476
NVD
Published: 2022-09-30
Updated: 2022-10-03

Summary

An issue was discovered in Bento4 through 1.6.0-639. A NULL pointer dereference occurs in AP4_File::ParseStream in Core/Ap4File.cpp, which is called from AP4_File::AP4_File.

Vulnerable Configurations

Part Description Count
Application
Axiosys
55

Common Weakness Enumeration (CWE)

References