Bento4 Denial of Service Vulnerability (CNVD-2023-00386)

A denial-of-service vulnerability exists in Bento4, an open source C library for reading and writing MP4 files. The vulnerability stems from a null pointer dereference in the AP4_DecoderConfigDescriptor::WriteFields component of /Core/Ap4Descriptor.h. An attacker could exploit this vulnerability to cause a denial of service impact.