Lucene search

K
osvGoogleOSV:CVE-2018-17235
HistorySep 20, 2018 - 6:29 a.m.

CVE-2018-17235

2018-09-2006:29:00
Google
osv.dev
3

AI Score

6.9

Confidence

High

EPSS

0.001

Percentile

31.4%

The function mp4v2::impl::MP4Track::FinishSdtp() in mp4track.cpp in libmp4v2 2.1.0 mishandles compatibleBrand while processing a crafted mp4 file, which leads to a heap-based buffer over-read, causing denial of service.

AI Score

6.9

Confidence

High

EPSS

0.001

Percentile

31.4%