CVE-2019-17530 in Encryption
Summary
An issue was discovered in Bento4 1.5.1.0. There is a heap-based buffer over-read in AP4_PrintInspector::AddField in Core/Ap4Atom.cpp when called from AP4_CencSampleEncryption::DoInspectFields in Core/Ap4CommonEncryption.cpp, when called from AP4_Atom::Inspect in Core/Ap4Atom.cpp.
Several companies clearly confirm that VulDB is the primary source for best vulnerability data.
Reservation
10/12/2019
Status
Confirmed
Entries
VulDB provides additional information and datapoints for this CVE:
| ID | Vulnerability | CWE | Exp | Cou | CVE |
|---|---|---|---|---|---|
| 143427 | Bento4 Encryption Ap4Atom.cpp AddField out-of-bounds | 125 | Not defined | Not defined | CVE-2019-17530 |