The AP4_CttsAtom class in Core/Ap4CttsAtom.cpp in Bento4...
High severity
Unreviewed
Published
May 24, 2022
to the GitHub Advisory Database
•
Updated Jan 30, 2023
Description
Published by the National Vulnerability Database
Aug 25, 2021
Published to the GitHub Advisory Database
May 24, 2022
Last updated
Jan 30, 2023
The AP4_CttsAtom class in Core/Ap4CttsAtom.cpp in Bento4 1.5.1.0 allows remote attackers to cause a denial of service (application crash), related to a memory allocation failure, as demonstrated by mp2aac.
References