CVE-2019-8382

An issue was discovered in Bento4 1.5.1-628. A NULL pointer dereference occurs in the function AP4_List:Find located in Core/Ap4List.h when called from Core/Ap4Movie.cpp. It can be triggered by sending a crafted file to the mp4dump binary. It allows an attacker to cause a Denial of Service (Segmentation fault) or possibly have unspecified other impact.

• CWE-476

• https://github.com/axiomatic-systems/Bento4/issues/364Exploit, Third Party Advisory
• https://research.loginsoft.com/bugs/null-pointer-dereference-vulnerability-in-function-ap4_listfind-bento4-1-5-1-628/Exploit, Third Party Advisory
• https://github.com/axiomatic-systems/Bento4/issues/364Exploit, Third Party Advisory
• https://research.loginsoft.com/bugs/null-pointer-dereference-vulnerability-in-function-ap4_listfind-bento4-1-5-1-628/Exploit, Third Party Advisory

Published

Feb 17, 2019

Last Modified

Jun 17, 2026

Status

Modified

• How Strix found a critical auth bypass in etcdStrix autonomously discovered a critical authentication bypass in etcd, later designated CVE-2026-33413.
• Autonomous PentestingAI agents that find and validate exploitable vulnerabilities like this one across your applications.
• PR ReviewsPentest every pull request so vulnerable code is caught before it ships to production.
• AI Penetration TestingHow AI-driven penetration testing continuously covers your attack surface.

• CVE-2019-8376An issue was discovered in Tcpreplay 4.3.1. A NULL pointer d…7.8
• CVE-2019-8377An issue was discovered in Tcpreplay 4.3.1. A NULL pointer d…7.8
• CVE-2019-8378An issue was discovered in Bento4 1.5.1-628. A heap-based bu…
• CVE-2019-8379An issue was discovered in AdvanceCOMP through 2.1. A NULL p…7.8
• CVE-2019-8380An issue was discovered in Bento4 1.5.1-628. A NULL pointer …
• CVE-2019-8381An issue was discovered in Tcpreplay 4.3.1. An invalid memor…7.8
• CVE-2019-8383An issue was discovered in AdvanceCOMP through 2.1. An inval…7.8
• CVE-2019-8385An issue was discovered in Thomson Reuters Desktop Extension…
• CVE-2019-8387MASTER IPCAMERA01 3.3.4.2103 devices allow Remote Command Ex…
• CVE-2019-8389A file-read vulnerability was identified in the Wi-Fi transf…8.1
• CVE-2019-8390qdPM 9.1 suffers from Cross-site Scripting (XSS) in the sear…
• CVE-2019-8391qdPM 9.1 suffers from Cross-site Scripting (XSS) via configu…