CVE-2020-23331

An issue was discovered in Bento4 version 06c39d9. A NULL pointer dereference exists in the AP4_DescriptorListWriter::Action component located in /Core/Ap4Descriptor.h. It allows an attacker to cause a denial of service (DOS).

• CWE-476

• https://github.com/axiomatic-systems/Bento4/issues/509Exploit, Third Party Advisory
• https://github.com/axiomatic-systems/Bento4/issues/509Exploit, Third Party Advisory

Published

Aug 17, 2021

Last Modified

Jun 17, 2026

Status

Modified

• How Strix found a critical auth bypass in etcdStrix autonomously discovered a critical authentication bypass in etcd, later designated CVE-2026-33413.
• Autonomous PentestingAI agents that find and validate exploitable vulnerabilities like this one across your applications.
• PR ReviewsPentest every pull request so vulnerable code is caught before it ships to production.
• AI Penetration TestingHow AI-driven penetration testing continuously covers your attack surface.

• CVE-2020-23320There is an Assertion in 'context_p->next_scanner_info_p->ty…7.5
• CVE-2020-23321There is a heap-buffer-overflow at lit-strings.c:431 in lit_…9.8
• CVE-2020-23322There is an Assertion in 'context_p->token.type == LEXER_RIG…7.5
• CVE-2020-23323There is a heap-buffer-overflow at re-parser.c in re_parse_c…9.8
• CVE-2020-23327Cross Site Scripting vulnerability found in ZblogCN ZblogPHP…6.1
• CVE-2020-23330An issue was discovered in Bento4 version 06c39d9. A NULL po…7.5
• CVE-2020-23332A heap-based buffer overflow exists in the AP4_StdcFileByteS…7.5
• CVE-2020-23333A heap-based buffer overflow exists in the AP4_CttsAtom::AP4…7.5
• CVE-2020-23334A WRITE memory access in the AP4_NullTerminatedStringAtom::A…7.5
• CVE-2020-23341A reflected cross site scripting (XSS) vulnerability in the …6.1
• CVE-2020-23342A CSRF vulnerability exists in Anchor CMS 0.12.7 anchor/view…8.8
• CVE-2020-23349An intent redirection issue was doscovered in Sina Weibo And…7.5