Bento4 Denial of Service Vulnerability (CNVD-2023-00388)

Bento4 is an open source C library for reading and writing MP4 files. Bento4 version 1.5.1-628 suffers from a denial of service vulnerability that stems from an unhandled memory allocation failure in Core/Ap48bdlAtom.cpp, resulting in a NULL pointer dereference, which could be exploited by an attacker to cause a denial of service impact.