### [CVE-2021-40943](https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2021-40943) ![](https://img.shields.io/static/v1?label=Product&message=n%2Fa&color=blue) ![](https://img.shields.io/static/v1?label=Version&message=n%2Fa%20&color=brightgreen) ![](https://img.shields.io/static/v1?label=Vulnerability&message=n%2Fa&color=brightgreen) ### Description In Bento4 1.6.0-638, there is a null pointer reference in the function AP4_DescriptorListInspector::Action function in Ap4Descriptor.h:124 , as demonstrated by GPAC. This can cause a denial of service (DOS). ### POC #### Reference - https://github.com/axiomatic-systems/Bento4/issues/643 #### Github No PoCs found on GitHub currently.