CVE-2018-20659: Medium severity bento4 vulnerability

Published Jan 2, 2019

Updated

An issue was discovered in Bento4 1.5.1-627. The AP4StcoAtom class in Core/Ap4StcoAtom.cpp has an attempted excessive memory allocation when called from AP4AtomFactory::CreateAtomFromStream in Core/Ap4AtomFactory.cpp, as demonstrated by mp42hls.

Affected Software

1 affected component

Axiosys Bento4=1.5.1-627

Event History

Jan 2, 2019

CVE Published

via MITRE·05:00 PM

Data Sourced

via MITRE·05:00 PM

Description

Frequently Asked Questions

What is the severity of CVE-2018-20659?

CVE-2018-20659 is considered a high severity vulnerability due to its potential impact on memory allocation.

How do I fix CVE-2018-20659?

To fix CVE-2018-20659, you should upgrade to the latest version of Bento4 that addresses this vulnerability.

What systems are affected by CVE-2018-20659?

CVE-2018-20659 affects Bento4 version 1.5.1-627 and may impact any software utilizing this version.

What kind of issue is CVE-2018-20659?

CVE-2018-20659 is an excessive memory allocation issue that could lead to potential denial of service.

Can CVE-2018-20659 be exploited remotely?

Yes, CVE-2018-20659 can potentially be exploited remotely if the vulnerable software is exposed to untrusted input.