First published: Wed Aug 14 2019(Updated: )
An issue was discovered in Bento4 1.5.1.0. There is a heap-based buffer over-read in the function AP4_BitReader::SkipBits at Core/Ap4Utils.cpp.
Credit: cve@mitre.org
Affected Software | Affected Version | How to fix |
---|---|---|
Bento4 | =1.5.1.0 |
Sign up to SecAlerts for real-time vulnerability data matched to your software, aggregated from hundreds of sources.
CVE-2019-15047 has been classified with a high severity due to the potential for a heap-based buffer over-read.
To fix CVE-2019-15047, you should update Bento4 to a version that is not affected, ideally a version higher than 1.5.1.0.
CVE-2019-15047 could lead to information disclosure or potential remote code execution due to the heap-based buffer over-read.
CVE-2019-15047 specifically affects Bento4 version 1.5.1.0.
You can find additional details on CVE-2019-15047 by checking the issue tracking pages of Bento4 repositories.