CVE-2019-7699

2019-02-1022:29:00

Google

osv.dev

AI Score

6.9

Confidence

High

EPSS

0.002

Percentile

53.5%

JSON

A heap-based buffer over-read occurs in AP4_BitStream::WriteBytes in Codecs/Ap4BitStream.cpp in Bento4 v1.5.1-627. Remote attackers could leverage this vulnerability to cause an exception via crafted mp4 input, which leads to a denial of service.

References

github.com/axiomatic-systems/Bento4/issues/355