Search CVE reports


Toggle filters

101 – 110 of 205 results


CVE-2019-20092

Medium priority
Needs evaluation

An issue was discovered in Bento4 1.5.1.0. There is a NULL pointer dereference in AP4_Descriptor::GetTag in mp42ts when called from AP4_EsDescriptor::GetDecoderConfigDescriptor in Ap4EsDescriptor.cpp.

1 affected package

kodi-inputstream-adaptive

Package 26.04 LTS 24.04 LTS 22.04 LTS 20.04 LTS 18.04 LTS
kodi-inputstream-adaptive Needs evaluation Needs evaluation Needs evaluation Not in release Not in release
Show less packages

CVE-2019-20091

Medium priority
Needs evaluation

An issue was discovered in Bento4 1.5.1.0. There is a NULL pointer dereference in AP4_Descriptor::GetTag in mp42ts when called from AP4_DecoderConfigDescriptor::GetDecoderSpecificInfoDescriptor in Ap4DecoderConfigDescriptor.cpp.

1 affected package

kodi-inputstream-adaptive

Package 26.04 LTS 24.04 LTS 22.04 LTS 20.04 LTS 18.04 LTS
kodi-inputstream-adaptive Needs evaluation Needs evaluation Needs evaluation Not in release Not in release
Show less packages

CVE-2019-20090

Medium priority
Needs evaluation

An issue was discovered in Bento4 1.5.1.0. There is a use-after-free in AP4_Sample::GetOffset in Core/Ap4Sample.h when called from Ap4LinearReader.cpp.

1 affected package

kodi-inputstream-adaptive

Package 26.04 LTS 24.04 LTS 22.04 LTS 20.04 LTS 18.04 LTS
kodi-inputstream-adaptive Needs evaluation Needs evaluation Needs evaluation Not in release Not in release
Show less packages

CVE-2019-17530

Medium priority
Needs evaluation

An issue was discovered in Bento4 1.5.1.0. There is a heap-based buffer over-read in AP4_PrintInspector::AddField in Core/Ap4Atom.cpp when called from AP4_CencSampleEncryption::DoInspectFields in Core/Ap4CommonEncryption.cpp, when...

1 affected package

kodi-inputstream-adaptive

Package 26.04 LTS 24.04 LTS 22.04 LTS 20.04 LTS 18.04 LTS
kodi-inputstream-adaptive Needs evaluation Needs evaluation Needs evaluation Not in release Not in release
Show less packages

CVE-2019-17529

Medium priority
Needs evaluation

An issue was discovered in Bento4 1.5.1.0. There is a heap-based buffer over-read in AP4_CencSampleEncryption::DoInspectFields in Core/Ap4CommonEncryption.cpp when called from AP4_Atom::Inspect in Core/Ap4Atom.cpp.

1 affected package

kodi-inputstream-adaptive

Package 26.04 LTS 24.04 LTS 22.04 LTS 20.04 LTS 18.04 LTS
kodi-inputstream-adaptive Needs evaluation Needs evaluation Needs evaluation Not in release Not in release
Show less packages

CVE-2019-17528

Medium priority
Needs evaluation

An issue was discovered in Bento4 1.5.1.0. There is a SEGV in the function AP4_TfhdAtom::SetDefaultSampleSize at Core/Ap4TfhdAtom.h when called from AP4_Processor::ProcessFragments in Core/Ap4Processor.cpp.

1 affected package

kodi-inputstream-adaptive

Package 26.04 LTS 24.04 LTS 22.04 LTS 20.04 LTS 18.04 LTS
kodi-inputstream-adaptive Needs evaluation Needs evaluation Needs evaluation Not in release Not in release
Show less packages

CVE-2019-17454

Medium priority
Needs evaluation

Bento4 1.5.1.0 has a NULL pointer dereference in AP4_Descriptor::GetTag in Core/Ap4Descriptor.h, related to AP4_StsdAtom::GetSampleDescription in Core/Ap4StsdAtom.cpp, as demonstrated by mp4info.

1 affected package

kodi-inputstream-adaptive

Package 26.04 LTS 24.04 LTS 22.04 LTS 20.04 LTS 18.04 LTS
kodi-inputstream-adaptive Needs evaluation Needs evaluation Needs evaluation Not in release Not in release
Show less packages

CVE-2019-17453

Medium priority
Needs evaluation

Bento4 1.5.1.0 has a NULL pointer dereference in AP4_DescriptorListWriter::Action in Core/Ap4Descriptor.h, related to AP4_IodsAtom::WriteFields in Core/Ap4IodsAtom.cpp, as demonstrated by mp4encrypt or mp4compact.

1 affected package

kodi-inputstream-adaptive

Package 26.04 LTS 24.04 LTS 22.04 LTS 20.04 LTS 18.04 LTS
kodi-inputstream-adaptive Needs evaluation Needs evaluation Needs evaluation Not in release Not in release
Show less packages

CVE-2019-17452

Medium priority
Needs evaluation

Bento4 1.5.1.0 has a NULL pointer dereference in AP4_DescriptorListInspector::Action in Core/Ap4Descriptor.h, related to AP4_IodsAtom::InspectFields in Core/Ap4IodsAtom.cpp, as demonstrated by mp4dump.

1 affected package

kodi-inputstream-adaptive

Package 26.04 LTS 24.04 LTS 22.04 LTS 20.04 LTS 18.04 LTS
kodi-inputstream-adaptive Needs evaluation Needs evaluation Needs evaluation Not in release Not in release
Show less packages

CVE-2019-16349

Medium priority
Needs evaluation

Bento4 1.5.1-628 has a NULL pointer dereference in AP4_ByteStream::ReadUI32 in Core/Ap4ByteStream.cpp when called from the AP4_TrunAtom class.

1 affected package

kodi-inputstream-adaptive

Package 26.04 LTS 24.04 LTS 22.04 LTS 20.04 LTS 18.04 LTS
kodi-inputstream-adaptive Needs evaluation Needs evaluation Needs evaluation Not in release Not in release
Show less packages