CVE-2019-13959: Null Pointer Dereference
Published Jul 18, 2019
·Updated
In Bento4 1.5.1-627, AP4DataBuffer::SetDataSize does not handle reallocation failures, leading to a memory copy into a NULL pointer. This is different from CVE-2018-20186.
Affected Software
1 affected component
Axiosys Bento4=1.5.1-627
Event History
Jul 18, 2019
CVE Published
via MITRE·06:51 PM
Data Sourced
via MITRE·06:51 PM
Description
Frequently Asked Questions
1
What is the severity of CVE-2019-13959?
CVE-2019-13959 is rated as a high severity vulnerability due to the potential for a memory copy into a NULL pointer, which may lead to application instability.
2
How do I fix CVE-2019-13959?
To fix CVE-2019-13959, update to a newer version of Bento4 where the reallocation failure handling has been resolved.
3
What kind of issue does CVE-2019-13959 represent in Bento4?
CVE-2019-13959 represents a memory management issue in Bento4's AP4_DataBuffer class that fails to handle reallocation errors.
4
Which versions of Bento4 are affected by CVE-2019-13959?
CVE-2019-13959 affects Bento4 version 1.5.1-627.
5
Is CVE-2019-13959 related to any other vulnerabilities?
Yes, CVE-2019-13959 is a different issue from CVE-2018-20186, despite both being related to memory handling in Bento4.