Codec::parse in track.cpp in Untrunc through 2018-06-07 has a NULL pointer dereference via a crafted MP4 file because of improper interaction with libav.
References
Link | Resource |
---|---|
https://github.com/ponchio/untrunc/issues/131 | Exploit Patch Third Party Advisory |
http://hac425.unaux.com/index.php/archives/66/ | Not Applicable |
Configurations
Information
Published : 2018-07-20 06:29
Updated : 2018-09-14 07:04
NVD link : CVE-2018-14448
Mitre link : CVE-2018-14448
JSON object : View
CWE
CWE-476
NULL Pointer Dereference
Products Affected
untrunc_project
- untrunc