CVE-2021-35307

An issue was discovered in Bento4 through v1.6.0-636. A NULL pointer dereference exists in the AP4_DescriptorFinder::Test component located in /Core/Ap4Descriptor.h. It allows an attacker to cause a denial of service (DOS).

• CWE-476

• https://github.com/axiomatic-systems/Bento4/issues/616Exploit, Third Party Advisory
• https://github.com/axiomatic-systems/Bento4/issues/616Exploit, Third Party Advisory

Published

Aug 5, 2021

Last Modified

Jun 17, 2026

Status

Modified

• How Strix found a critical auth bypass in etcdStrix autonomously discovered a critical authentication bypass in etcd, later designated CVE-2026-33413.
• Autonomous PentestingAI agents that find and validate exploitable vulnerabilities like this one across your applications.
• PR ReviewsPentest every pull request so vulnerable code is caught before it ships to production.
• AI Penetration TestingHow AI-driven penetration testing continuously covers your attack surface.

• CVE-2021-3530A flaw was discovered in GNU libiberty within demangle_path(…7.5
• CVE-2021-35300Text injection/Content Spoofing in 404 page in Zammad 1.0.x …4.3
• CVE-2021-35301Incorrect Access Control in Zammad 1.0.x up to 4.0.0 allows …5.3
• CVE-2021-35302Incorrect Access Control for linked Tickets in Zammad 1.0.x …5.3
• CVE-2021-35303Cross Site Scripting (XSS) in Zammad 1.0.x up to 4.0.0 allow…6.1
• CVE-2021-35306An issue was discovered in Bento4 through v1.6.0-636. A NULL…6.5
• CVE-2021-35309An issue discovered in Samsung SyncThru Web Service SPL 5.93…7.5
• CVE-2021-3531A flaw was found in the Red Hat Ceph Storage RGW in versions…5.3
• CVE-2021-35312A vulnerability was found in CIR 2000 / Gestionale Amica Pro…7.8
• CVE-2021-35313Rejected reason: DO NOT USE THIS CANDIDATE NUMBER. ConsultID…
• CVE-2021-3532Rejected reason: This CVE is marked as INVALID and not a bug
• CVE-2021-35323Cross Site Scripting (XSS) vulnerability exists in bludit 3-…6.1