CVE-2018-5253

The AP4_FtypAtom class in Core/Ap4FtypAtom.cpp in Bento4 1.5.1.0 has an Infinite loop via a crafted MP4 file that triggers size mishandling.

Score

CVSS 3.0 7.8 High

Status

Modified - cve@mitre.org

Published

2018-01-05

Last modified

2024-09-16

Weaknesses

CWE-835

Affected products

• Bento4 (Axiosys)

References

• https://github.com/axiomatic-systems/Bento4/issues/233