Medium severity6.5NVD Advisory· Published Oct 10, 2019· Updated Jun 17, 2026

CVE-2019-17453

Description

Bento4 1.5.1.0 has a NULL pointer dereference in AP4_DescriptorListWriter::Action in Core/Ap4Descriptor.h, related to AP4_IodsAtom::WriteFields in Core/Ap4IodsAtom.cpp, as demonstrated by mp4encrypt or mp4compact.

AI Insight

LLM-synthesized narrative grounded in this CVE's description and references.

Affected products

Bento4/Bento42 versions
cpe:2.3:a:axiosys:bento4:1.5.1.0:*:*:*:*:*:*:*+ 1 more
- cpe:2.3:a:axiosys:bento4:1.5.1.0:*:*:*:*:*:*:*
- (no CPE)range: =1.5.1.0
Bento4/Bento4description

Patches

Vulnerability mechanics

References

github.com/axiomatic-systems/Bento4/issues/436nvdExploitThird Party Advisory
github.com/axiomatic-systems/Bento4/issues/437nvdExploitThird Party Advisory

News mentions

No linked articles in our index yet.

cvss	0.423
epss	0.001
exploit	0.000
kev	0.000
patch	0.000
ransomware	0.000