PT-2019-18708 · Axiomatic Systems · Bento4

Wcventure · Published 2019-02-10 · Updated 2020-08-24 · CVE-2019-7698

Positive Technologies (AI Summary)

CVSS v3.1

6.5

Medium

Base vector

AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H

Name of the Vulnerable Software and Affected Versions Bento4 version 1.5.1-627

Description An issue was discovered in the AP4 Array function, which can be triggered by crafted MP4 input, leading to an attempt at excessive memory allocation. This issue is related to a previously known problem.

Recommendations For Bento4 version 1.5.1-627, consider updating to a newer version that addresses this issue, as the current version may be prone to excessive memory allocation attempts when processing crafted MP4 input. At the moment, there is no information about a newer version that contains a fix for this vulnerability.

Exploit

Allocation of Resources Without Limits

Weakness Enumeration

CWE-770

Related Identifiers

CVE-2019-7698

Affected Products

Bento4

References · 6

• 🔥 https://github.com/axiomatic-systems/Bento4/issues/354 · Exploit
• https://osv.dev/vulnerability/CVE-2019-7698 · Vendor Advisory
• https://nvd.nist.gov/vuln/detail/CVE-2019-7698 · Security Note
• https://cve.org/CVERecord?id=CVE-2019-7698 · Security Note
• https://osv.dev/vulnerability/UBUNTU-CVE-2019-7698 · Vendor Advisory
• https://ubuntu.com/security/CVE-2019-7698 · Vendor Advisory