CVE-2017-12475

See a problem?
Please try reporting it to the source first.
Source
https://cve.org/CVERecord?id=CVE-2017-12475
Import Source
https://storage.googleapis.com/cve-osv-conversion/osv-output/CVE-2017-12475.json
JSON Data
https://api.osv.dev/v1/vulns/CVE-2017-12475
Downstream
Published
2017-09-06T08:29:00.243Z
Modified
2026-07-08T12:05:52.667842Z
Severity
  • 5.5 (Medium) CVSS_V3 - CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H CVSS Calculator
Summary
[none]
Details

The AP4_Processor::Process function in Core/Ap4Processor.cpp in Bento4 mp4encrypt before 1.5.0-616 allows remote attackers to cause a denial of service (NULL pointer dereference and application crash) via a crafted mp4 file.

References

Affected packages

Git / github.com/axiomatic-systems/bento4

Affected ranges

Type
GIT
Repo
https://github.com/axiomatic-systems/bento4
Events
Introduced
0 Unknown introduced commit / All previous commits are affected
Last affected
52bcd052b68072b2ddbb2d698294239ddd6dadc4
Fixed
4d3f0bebd5f8518fd775f671c12bea58c68e814e
Database specific 
{
    "extracted_events": [
        {
            "introduced": "0"
        },
        {
            "last_affected": "1.5.0-615"
        }
    ],
    "cpe": "cpe:2.3:a:axiosys:bento4:*:*:*:*:*:*:*:*",
    "source": [
        "CPE_RANGE",
        "REFERENCES"
    ]
}

Affected versions

v1.*
v1.4.2-584
v1.4.2-586
v1.4.2-587
v1.4.2-588
v1.4.2-589
v1.4.2-590
v1.4.2-591
v1.4.2-592
v1.4.2-593
v1.4.2-594
v1.4.3-595
v1.4.3-596
v1.4.3-597
v1.4.3-598
v1.4.3-599
v1.4.3-600
v1.4.3-601
v1.4.3-602
v1.4.3-603
v1.4.3-604
v1.4.3-605
v1.4.3-606
v1.4.3-607
v1.4.3-608
v1.5.0-609
v1.5.0-610
v1.5.0-611
v1.5.0-612
v1.5.0-613
v1.5.0-615

Database specific

vanir_signatures_modified 
"2026-07-08T12:05:52Z"
source 
"https://storage.googleapis.com/cve-osv-conversion/osv-output/CVE-2017-12475.json"
vanir_signatures 
[
    {
        "signature_type": "Line",
        "target": {
            "file": "Source/C++/Core/Ap4AvccAtom.cpp"
        },
        "deprecated": false,
        "digest": {
            "line_hashes": [
                "84022314734891574199871882695032361778",
                "171059907009446573162562772287270821155",
                "279969096960240345035820857130433745699",
                "295420202832385258523700312792608286655"
            ],
            "threshold": 0.9
        },
        "id": "CVE-2017-12475-30b075c5",
        "source": "https://github.com/axiomatic-systems/bento4/commit/4d3f0bebd5f8518fd775f671c12bea58c68e814e",
        "signature_version": "v1"
    },
    {
        "signature_type": "Line",
        "target": {
            "file": "Source/C++/Core/Ap4Processor.cpp"
        },
        "deprecated": false,
        "digest": {
            "line_hashes": [
                "154715150314545768978829984427111092107",
                "311931562962270247245184261176319430329",
                "251301050117220292542939663153297262201",
                "2816927888908992041112841057907278729"
            ],
            "threshold": 0.9
        },
        "id": "CVE-2017-12475-3b602a59",
        "source": "https://github.com/axiomatic-systems/bento4/commit/4d3f0bebd5f8518fd775f671c12bea58c68e814e",
        "signature_version": "v1"
    },
    {
        "signature_type": "Function",
        "target": {
            "file": "Source/C++/Core/Ap4Processor.cpp",
            "function": "AP4_Processor::Process"
        },
        "deprecated": false,
        "digest": {
            "length": 6565.0,
            "function_hash": "193395187742426618272724187477474149448"
        },
        "id": "CVE-2017-12475-42f40e1a",
        "source": "https://github.com/axiomatic-systems/bento4/commit/4d3f0bebd5f8518fd775f671c12bea58c68e814e",
        "signature_version": "v1"
    },
    {
        "signature_type": "Function",
        "target": {
            "file": "Source/C++/Core/Ap4AtomSampleTable.cpp",
            "function": "AP4_AtomSampleTable::GetSample"
        },
        "deprecated": false,
        "digest": {
            "length": 1798.0,
            "function_hash": "79412466060385049557278148003220286276"
        },
        "id": "CVE-2017-12475-60837c8f",
        "source": "https://github.com/axiomatic-systems/bento4/commit/4d3f0bebd5f8518fd775f671c12bea58c68e814e",
        "signature_version": "v1"
    },
    {
        "signature_type": "Function",
        "target": {
            "file": "Source/C++/Core/Ap4AvccAtom.cpp",
            "function": "AP4_AvccAtom::InspectFields"
        },
        "deprecated": false,
        "digest": {
            "length": 948.0,
            "function_hash": "124655797944461491250835557859257994442"
        },
        "id": "CVE-2017-12475-77ff6cec",
        "source": "https://github.com/axiomatic-systems/bento4/commit/4d3f0bebd5f8518fd775f671c12bea58c68e814e",
        "signature_version": "v1"
    },
    {
        "signature_type": "Line",
        "target": {
            "file": "Source/C++/Core/Ap4AtomSampleTable.cpp"
        },
        "deprecated": false,
        "digest": {
            "line_hashes": [
                "75354815925692739227399233083237127609",
                "211280023659473102723899245428761742131",
                "48290816414687888719436012006338905176"
            ],
            "threshold": 0.9
        },
        "id": "CVE-2017-12475-800de5f6",
        "source": "https://github.com/axiomatic-systems/bento4/commit/4d3f0bebd5f8518fd775f671c12bea58c68e814e",
        "signature_version": "v1"
    }
]