Lucene search

K
nvd[email protected]NVD:CVE-2023-29578
HistoryApr 24, 2023 - 1:15 p.m.

CVE-2023-29578

2023-04-2413:15:07
CWE-787
web.nvd.nist.gov
2
mp4v2
heap buffer overflow
mp4stringproperty

CVSS3

8.8

Attack Vector

NETWORK

Attack Complexity

LOW

Privileges Required

NONE

User Interaction

REQUIRED

Scope

UNCHANGED

Confidentiality Impact

HIGH

Integrity Impact

HIGH

Availability Impact

HIGH

CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H

EPSS

0.002

Percentile

59.6%

mp4v2 v2.0.0 was discovered to contain a heap buffer overflow via the mp4v2::impl::MP4StringProperty::~MP4StringProperty() function at src/mp4property.cpp.

Affected configurations

Nvd
Node
mp4v2_projectmp4v2Match2.0.0
VendorProductVersionCPE
mp4v2_projectmp4v22.0.0cpe:2.3:a:mp4v2_project:mp4v2:2.0.0:*:*:*:*:*:*:*

CVSS3

8.8

Attack Vector

NETWORK

Attack Complexity

LOW

Privileges Required

NONE

User Interaction

REQUIRED

Scope

UNCHANGED

Confidentiality Impact

HIGH

Integrity Impact

HIGH

Availability Impact

HIGH

CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H

EPSS

0.002

Percentile

59.6%

Related for NVD:CVE-2023-29578