CVE-2018-14543: Null Pointer Dereference

Published Jul 23, 2018

Updated

There exists one NULL pointer dereference vulnerability in AP4JsonInspector::AddField in Ap4Atom.cpp in Bento4 1.5.1-624, which can allow attackers to cause a denial-of-service via a crafted mp4 file. This vulnerability can be triggered by the executable mp4dump.

Affected Software

1 affected component

Axiosys Bento4=1.5.1-624

Event History

Jul 23, 2018

CVE Published

via MITRE·08:00 AM

Data Sourced

via MITRE·08:00 AM

Description

Frequently Asked Questions

What is the severity of CVE-2018-14543?

The CVE-2018-14543 vulnerability has a medium severity due to its potential to cause a denial-of-service through a crafted mp4 file.

How do I fix CVE-2018-14543?

To fix CVE-2018-14543, update to a patched version of Bento4 that addresses the NULL pointer dereference issue.

What component is impacted by CVE-2018-14543?

CVE-2018-14543 impacts the AP4_JsonInspector::AddField function in Ap4Atom.cpp within the Bento4 software.

Can CVE-2018-14543 be exploited remotely?

Yes, CVE-2018-14543 can be exploited remotely using a crafted mp4 file which triggers the vulnerability.

Which versions of Bento4 are affected by CVE-2018-14543?

CVE-2018-14543 affects Bento4 version 1.5.1-624.