CVE-2017-14638 - AP4_AtomFactory::CreateAtomFromStream in Core/Ap4AtomFactory.cpp in Bento4 version 1.5.0-617 has missing NULL checks, leading to a NULL pointer dereference, segmentation fault, and application crash in AP4_Atom::SetType in Core/Ap4Atom.h

Back Back to CVE browser

MEDIUM

AP4_AtomFactory::CreateAtomFromStream in Core/Ap4AtomFactory.cpp in Bento4 version 1.5.0-617 has missing NULL checks, leading to a NULL pointer dereference, segmentation fault, and application crash in AP4_Atom::SetType in Core/Ap4Atom.h

Published Sep 21, 2017

6.5

MEDIUM

CVSS 3.0

EPSS 1.56%

Description

AP4_AtomFactory::CreateAtomFromStream in Core/Ap4AtomFactory.cpp in Bento4 version 1.5.0-617 has missing NULL checks, leading to a NULL pointer dereference, segmentation fault, and application crash in AP4_Atom::SetType in Core/Ap4Atom.h.

Affected products

Remediation

No remediation recorded yet.

Weaknesses (1)

CWE-476

NULL Pointer Dereference

References (3)

https://blogs.gentoo.org/ago/2017/09/14/bento4-null-pointer-dereference-in-ap4_atomsettype-ap4atom-h/
x_refsource_MISCExploitIssue TrackingPatchThird Party AdvisoryVDB Entry
https://github.com/axiomatic-systems/Bento4/commit/be7185faf7f52674028977dcf501c6039ff03aa5
x_refsource_MISCPatchThird Party Advisory
https://github.com/axiomatic-systems/Bento4/issues/182
x_refsource_MISCExploitThird Party Advisory

Link	Providers	Tags
https://blogs.gentoo.org/ago/2017/09/14/bento4-null-pointer-dereference-in-ap4_atomsettype-ap4atom-h/		x_refsource_MISCExploitIssue TrackingPatchThird Party AdvisoryVDB Entry
https://github.com/axiomatic-systems/Bento4/commit/be7185faf7f52674028977dcf501c6039ff03aa5		x_refsource_MISCPatchThird Party Advisory
https://github.com/axiomatic-systems/Bento4/issues/182		x_refsource_MISCExploitThird Party Advisory