CVE-2019-8380: Null Pointer Dereference

Published Feb 17, 2019

Updated

An issue was discovered in Bento4 1.5.1-628. A NULL pointer dereference occurs in AP4Track::GetSampleIndexForTimeStampMs() located in Core/Ap4Track.cpp. It can triggered by sending a crafted file to the mp4audioclip binary. It allows an attacker to cause a Denial of Service (Segmentation fault) or possibly have unspecified other impact.

Affected Software

1 affected component

Axiosys Bento4=1.5.1-628

Event History

Feb 17, 2019

CVE Published

via MITRE·02:00 AM

Data Sourced

via MITRE·02:00 AM

Description

Data Sourced

via NVD·02:29 AM

DescriptionSeverityWeaknessAffected Software

Frequently Asked Questions

What is the severity of CVE-2019-8380?

CVE-2019-8380 has a severity rating that indicates it can lead to Denial of Service due to a NULL pointer dereference.

How do I fix CVE-2019-8380?

To fix CVE-2019-8380, update Bento4 to a version later than 1.5.1-628 that addresses this vulnerability.

What type of vulnerability is CVE-2019-8380?

CVE-2019-8380 is classified as a NULL pointer dereference vulnerability.

What software is affected by CVE-2019-8380?

CVE-2019-8380 affects Bento4 version 1.5.1-628.

Can CVE-2019-8380 be exploited remotely?

Yes, CVE-2019-8380 can be exploited remotely by sending a crafted file to the mp4audioclip binary.