MP4Box NULL Pointer Dereference Crash via UBSan Analysis

Vulnerability Overview UBSan reported an error where a null pointer was passed to a non-null parameter, specifically occurring within the function and triggered by the MP4Box tool. This issue is related to the option in MP4Box, leading to a program crash. Impact Scope Software Version: UBSan (UndefinedBehaviorSanitizer) Tool Version: MP4Box Trigger Condition: Processing specific MP4 files using Fix Solution Current Status: The issue has been closed, but it has not been fully resolved. Related Commits: - Commit : Added to the function. - Commit : Fixed a floating-point overflow issue in . POC Code ```plaintext gdb --args /bin/gcc/MP4Box -hint -i /home/gpac/gpac-2/latest/bin/gcc/MP4Box -hint -i /home/gpac/gpac-2/latest/bin/gcc/MP4Box -hint -i /home/gpac/gpac-2/latest/bin/gcc/MP4Box -hint -i /home/gpac/gpac-2/latest/bin/gcc/MP4Box -hint -i /home/gpac/gpac-2/latest/bin/gcc/MP4Box -hint -i /home/gpac/gpac-2/latest/bin/gcc/MP4Box -hint -i /home/gpac/gpac-2/latest/bin/gcc/MP4Box -hint -i /home/gpac/gpac-2/latest/bin/gcc/MP4Box -hint -i /home/gpac/gpac-2/latest/bin/gcc/MP4Box -hint -i /home/gpac/gpac-2/latest/bin/gcc/MP4Box -hint -i /home/gpac/gpac-2/latest/bin/gcc/MP4Box -hint -i /home/gpac/gpac-2/latest/bin/gcc/MP4Box -hint -i /home/gpac/gpac-2/latest/bin/gcc/MP4Box -hint -i /home/gpac/gpac-2/latest/bin/gcc/MP4Box -hint -i /home/gpac/gpac-2/latest/bin/gcc/MP4Box -hint -i /home/gpac/gpac-2/latest/bin/gcc/MP4Box -hint -i /home/gpac/gpac-2/latest/bin/gcc/MP4Box -hint -i /home/gpac/gpac-2/latest/bin/gcc/MP4Box -hint -i /home/gpac/gpac-2/latest/bin/gcc/MP4Box -hint -i /home/gpac/gpac-2/latest/bin/gcc/MP4Box -hint -i /home/gpac/gpac-2/latest/bin/gcc/MP4Box -hint -i /home/gpac/gpac-2/latest/bin/gcc/MP4Box -hint -i /home/gpac/gpac-2/latest/bin/gcc/MP4Box -hint -i /home/gpac/gpac-2/latest/bin/gcc/MP4Box -hint -i /home/gpac/gpac-2/latest/bin/gcc/MP4Box -hint -i /home/gpac/gpac-2/latest/bin/gcc/MP4Box -hint -i /home/gpac/gpac-2/latest/bin/gcc/MP4Box -hint -i /home/gpac/gpac-2/latest/bin/gcc/MP4Box -hint -i /home/gpac/gpac-2/latest/bin/gcc/MP4Box -hint -i /home/gpac/gpac-2/latest/bin/gcc/MP4Box -hint -i /home/gpac/gpac-2/latest/bin/gcc/MP4Box -hint -i /home/gpac/gpac-2/latest/bin/gcc/MP4Box -hint -i /home/gpac/gpac-2/latest/bin/gcc/MP4Box -hint -i /home/gpac/gpac-2/latest/bin/gcc/MP4Box -hint -i /home/gpac/gpac-2/latest/bin/gcc/MP4Box -hint -i /home/gpac/gpac-2/latest/bin/gcc/MP4Box -hint -i /home/gpac/gpac-2/latest/bin/gcc/MP4Box -hint -i /home/gpac/gpac-2/latest/bin/gcc/MP4Box -hint -i /home/gpac/gpac-2/latest/bin/gcc/MP4Box -hint -i /home/gpac/gpac-2/latest/bin/gcc/MP4Box -hint -i /home/gpac/gpac-2/latest/bin/gcc/MP4Box -hint -i /home/gpac/gpac-2/latest/bin/gcc/MP4Box -hint -i /home/gpac/gpac-2/latest/bin/gcc/MP4Box -hint -i /home/gpac/gpac-2/latest/bin/gcc/MP4Box -hint -i /home/gpac/gpac-2/latest/bin/gcc/MP4Box -hint -i /home/gpac/gpac-2/latest/bin/gcc/MP4Box -hint -i /home/gpac/gpac-2/latest/bin/gcc/MP4Box -hint -i /home/gpac/gpac-2/latest/bin/gcc/MP4Box -hint -i /home/gpac/gpac-2/latest/bin/gcc/MP4Box -hint -i /home/gpac/gpac-2/latest/bin/gcc/MP4Box -hint -i /home/gpac/gpac-2/latest/bin/gcc/MP4Box -hint -i /home/gpac/gpac-2/latest/bin/gcc/MP4Box -hint -i /home/gpac/gpac-2/latest/bin/gcc/MP4Box -hint -i /home/gpac/gpac-2/latest/bin/gcc/MP4Box -hint -i /home/gpac/gpac-2/latest/bin/gcc/MP4Box -hint -i /home/gpac/gpac-2/latest/bin/gcc/MP4Box -hint -i /home/gpac/gpac-2/latest/bin/gcc/MP4Box -hint -i /home/gpac/gpac-2/latest/bin/gcc/MP4Box -hint -i /home/gpac/gpac-2/latest/bin/gcc/MP4Box -hint -i /home/gpac/gpac-2/latest/bin/gcc/MP4Box -hint -i /home/gpac/gpac-2/latest/bin/gcc/MP4Box -hint -i /home/gpac/gpac-2/latest/bin/gcc/MP4Box -hint -i /home/gpac/gpac-2/latest/bin/gcc/MP4Box -hint -i /home/gpac/gpac-2/latest/bin/gcc/MP4Box -hint -i /home/gpac/gpac-2/latest/bin/gcc/MP4Box -hint -i /home/gpac/gpac-2/latest/bin/gcc/MP4Box -hint -i /home/gpac/gpac-2/latest/bin/gcc/MP4Box -hint -i /home/gpac/gpac-2/latest/bin/gcc/MP4Box -hint -i /home/gpac/gpac-2/latest/bin/gcc/MP4Box -hint -i /home/gpac/gpac-2/latest/bin/gcc/MP4Box -hint -i /home/gpac/gpac-2/latest/bin/gcc/MP4Box -hint -i /home/gpac/gpac-2/latest/bin/gcc/MP4Box -hint -i /home/gpac/gpac-2/latest/bin/gcc/MP4Box -hint -i /home/gpac/gpac-2/latest/bin/gcc/MP4Box -hint -i /home/gpac/gpac-2/latest/bin/gcc/MP4Box -hint -i /home/gpac/gpac-2/latest/bin/gcc/MP4Box -hint -i /home/gpac/gpac-2/latest/bin/gcc/MP4Box -hint -i /home/gpac/gpac-2/latest/bin/gcc/MP4Box -hint -i /home/gpac/gpac-2/latest/bin/gcc/MP4Box -hint -i /home/gpac/gpac-2/latest/bin/gcc/MP4Box -hint -i /home/gpac/gpac-2/latest/bin/gcc/MP4Box -hint -i /home/gpac/gpac-2/latest/bin/gcc/MP4Box -hint -i /home/gpac/gpac-2/latest/bin/gcc/MP4Box -hint -i /home/gpac/gpac-2/latest/bin/gcc/MP4Box -hint -i /home/gpac/gpac-2/latest/bin/gcc/MP4Box -hint -i /home/gpac/gpac-2/latest/bin/gcc/MP4Box -hint -i /home/gpac/gpac-2/latest/bin/gcc/MP4Box -hint -i /home/gpac/gpac-2/latest/bin/gcc/MP4Box -hint -i /home/gpac/gpac-2/latest/bin/gcc/MP

Goal Reached Thanks to every supporter — we hit 100%!

MP4Box NULL Pointer Dereference Crash via UBSan Analysis

More from this source