CVE-2018-13848

HIGH 7.5CVE-2018-13848 · Published 10/07/2018 · updated 17/06/2026

In short

CVE-2018-13848 is a HIGH (CVSS 7.5) vulnerability affecting bento4 (axiosys).
Chance of exploitation in the next 30 days (EPSS): 1.4%, higher than 72.7% of all vulnerabilities.
No patched version is listed yet: follow the vendor's advisory in References.

Package	Affected versions	Patched versions
bento4 axiosys	`= 1.5.1-624`	No fix yet

An issue has been found in Bento4 1.5.1-624. It is a SEGV in AP4_StszAtom::GetSampleSize in Core/Ap4StszAtom.cpp.

Running one of these products? Scan your site to see whether it exposes a vulnerable version.