CVE-2018-20186

An issue was discovered in Bento4 1.5.1-627. AP4_Sample::ReadData in Core/Ap4Sample.cpp allows attackers to trigger an attempted excessive memory allocation, related to AP4_DataBuffer::SetDataSize and AP4_DataBuffer::ReallocateBuffer in Core/Ap4DataBuffer.cpp.

Score

CVSS 3.0 6.5 Medium

Status

Modified - cve@mitre.org

Published

2018-12-17

Last modified

2024-08-05

Weaknesses

CWE-400

Affected products

• Bento4 (Axiosys)

References

• https://github.com/axiomatic-systems/Bento4/issues/342