CVE-2017-12474

CVE-2017-12474 describes a NULL pointer dereference vulnerability in the AP4_AtomSampleTable::GetSample function within Bento4 mp42ts versions prior to 1.5.0-616. This flaw allows an unauthenticated attacker to trigger a denial of service by providing a specially crafted MP4 file. Rated Medium severity (CVSS 5.5), successful exploitation requires local access and user interaction to process the malicious file, resulting in an application crash. There is no evidence of active exploitation, public exploit code (Metasploit, Nuclei, ExploitDB), or significant community discussion or media coverage surrounding this vulnerability.