PT-2018-12476 · Mp4V2 · Mp4V2

🗓️ 18 Jul 2018 00:00:00Reported by Positive TechnologiesType

MP4v2 version 2.0.0 has a type confusion in MP4Atom::factory causing memory corruption with crafted MP4 files; patch to use MP4DataAtom.

Reporter	Title	Published	Views	Family All 22
CNVD	MP4v2 Denial of Service Vulnerability (CNVD-2018-21112)	20 Jul 201800:00	–	cnvd
CVE	CVE-2018-14379	18 Jul 201800:00	–	cve
Cvelist	CVE-2018-14379	18 Jul 201800:00	–	cvelist
Debian CVE	CVE-2018-14379	18 Jul 201800:00	–	debiancve
EUVD	EUVD-2018-6299	7 Oct 202500:30	–	euvd
Fedora	[SECURITY] Fedora 31 Update: libmp4v2-2.1.0-0.19.trunkREV507.fc31	17 Nov 201901:32	–	fedora
Fedora	[SECURITY] Fedora 30 Update: libmp4v2-2.1.0-0.19.trunkREV507.fc30	18 Nov 201901:19	–	fedora
Fedora	[SECURITY] Fedora 29 Update: libmp4v2-2.1.0-0.19.trunkREV507.fc29	18 Nov 201901:52	–	fedora
Tenable Nessus	Fedora 30 : libmp4v2 (2019-1030f4816a)	18 Nov 201900:00	–	nessus
Tenable Nessus	Fedora 29 : libmp4v2 (2019-6469ad8129)	18 Nov 201900:00	–	nessus

Source	Link
lists	www.lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/GISUIWPKBWPXORUFNWBGFTKQS7UUVUC4
osv	www.osv.dev/vulnerability/MGASA-2020-0062
lists	www.lists.fedoraproject.org/archives/list/[email protected]/thread/6YCHVOYPIBGM5HYUMQ77KZH2IHSITKVE
nvd	www.nvd.nist.gov/vuln/detail/CVE-2018-14379
lists	www.lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/FRSO2IMK6P7MOIZWGWKONPIEHKBA7WL3
osv	www.osv.dev/vulnerability/CVE-2018-14379
cve	www.cve.org/CVERecord
ubuntu	www.ubuntu.com/security/CVE-2018-14379
advisories	www.advisories.mageia.org/MGASA-2020-0062.html
osv	www.osv.dev/vulnerability/UBUNTU-CVE-2018-14379

11 Apr 2023 00:00Current

9.1High risk

Vulners AI Score9.1

CVSS 3.18.8

CVSS 26.8

CVSS 38.8

EPSS0.00546