CVE-2017-12475

CVE-2017-12475 describes a denial-of-service vulnerability affecting Bento4 mp4encrypt versions prior to 1.5.0-616. This flaw, a NULL pointer dereference in the AP4_Processor::Process function, can be triggered by a remote attacker providing a specially crafted MP4 file, leading to an application crash. Rated Medium (CVSS 5.5), the attack requires local access and user interaction to execute, resulting in high availability impact. There is no evidence of active exploitation, public exploit code (Metasploit, Nuclei, ExploitDB), or significant community discussion or media coverage surrounding this CVE.