A NULL pointer dereference was discovered in the AP4_HdlrAtom class in Bento4 version 1.5.0-617. The vulnerability causes a segmentation fault and application crash in AP4_StdcFileByteStream::ReadPartial in System/StdC/Ap4StdCFileByteStream.cpp, which leads to remote denial of service.
| Software | From | Fixed in |
|---|---|---|
| bento4 / bento4 | 1.5.0-617 | 1.5.0-617.x |