565 matches found
CVE-2018-14445
Summary: Bento4 library (v1.5.1-624) contains a vulnerability in AP4_File::ParseStream (Ap4File.cpp) that allows remote attackers to cause a denial of service (infinite loop) via a crafted MP4 file. The issue is documented across multiple sources (NVD, CNVD, OSV, Ubuntu listings). The connected d...
CVE-2018-14445
In Bento4 v1.5.1-624, AP4File::ParseStream in Ap4File.cpp allows remote attackers to cause a denial of service infinite loop via a crafted MP4 file...
PT-2018-12523 · Mp4V2 · Mp4V2
Name of the Vulnerable Software and Affected Versions: MP4v2 version 2.1.0 Description: The issue allows remote attackers to cause a denial of service, which may lead to a heap-based buffer overflow and application crash, or possibly have other unspecified impacts. This can be achieved via a...
Type confusion
MP4Atom::factory in mp4atom.cpp in MP4v2 2.0.0 incorrectly uses the MP4ItemAtom data type in a certain case where MP4DataAtom is required, which allows remote attackers to cause a denial of service memory corruption or possibly have unspecified other impact via a crafted MP4 file, because access ...
CVE-2018-14379
MP4Atom::factory in mp4atom.cpp in MP4v2 2.0.0 incorrectly uses the MP4ItemAtom data type in a certain case where MP4DataAtom is required, which allows remote attackers to cause a denial of service memory corruption or possibly have unspecified other impact via a crafted MP4 file, because access ...
UBUNTU-CVE-2018-14379
MP4Atom::factory in mp4atom.cpp in MP4v2 2.0.0 incorrectly uses the MP4ItemAtom data type in a certain case where MP4DataAtom is required, which allows remote attackers to cause a denial of service memory corruption or possibly have unspecified other impact via a crafted MP4 file, because access ...
UBUNTU-CVE-2018-1000100
GPAC MP4Box version 0.7.1 and earlier contains a Buffer Overflow vulnerability in src/isomedia/avcext.c lines 2417 to 2420 that can result in Heap chunks being modified, this could lead to RCE. This attack appear to be exploitable via an attacker supplied MP4 file that when run by the victim may...
CVE-2018-7339
The MP4Atom class in mp4atom.cpp in MP4v2 through 2.0.0 mishandles Entry Number validation for the MP4 Table Property, which allows remote attackers to cause a denial of service overflow, insufficient memory allocation, and segmentation fault or possibly have unspecified other impact via a crafte...
Design/Logic Flaw
The MP4Atom class in mp4atom.cpp in MP4v2 through 2.0.0 mishandles Entry Number validation for the MP4 Table Property, which allows remote attackers to cause a denial of service overflow, insufficient memory allocation, and segmentation fault or possibly have unspecified other impact via a crafte...
CVE-2018-7339
The MP4Atom class in mp4atom.cpp in MP4v2 through 2.0.0 mishandles Entry Number validation for the MP4 Table Property, which allows remote attackers to cause a denial of service overflow, insufficient memory allocation, and segmentation fault or possibly have unspecified other impact via a crafte...
CVE-2018-7339
The MP4Atom class in mp4atom.cpp in MP4v2 through 2.0.0 mishandles Entry Number validation for the MP4 Table Property, which allows remote attackers to cause a denial of service overflow, insufficient memory allocation, and segmentation fault or possibly have unspecified other impact via a crafte...
CVE-2018-7339
Removed by vendor...
CVE-2018-6392
The filterslice function in libavfilter/vftranspose.c in FFmpeg through 3.4.1 allows remote attackers to cause a denial of service out-of-array access via a crafted MP4 file...
DEBIAN-CVE-2018-6392
The filterslice function in libavfilter/vftranspose.c in FFmpeg through 3.4.1 allows remote attackers to cause a denial of service out-of-array access via a crafted MP4 file...
CVE-2018-6392
The filterslice function in libavfilter/vftranspose.c in FFmpeg through 3.4.1 allows remote attackers to cause a denial of service out-of-array access via a crafted MP4 file...
CVE-2018-6392
The filterslice function in libavfilter/vftranspose.c in FFmpeg through 3.4.1 allows remote attackers to cause a denial of service out-of-array access via a crafted MP4 file...
Vulnerability of the mp4ff_read_ctts function in the audio file decoder Freeware Advanced Audio Decoder 2, allowing a hacker to cause a service failure
The vulnerability of the mp4ffreadctts function common/mp4ff/mp4atom.c in the Freeware Advanced Audio Decoder 2 decoder is related to resource management errors. Exploiting this vulnerability can allow a malicious actor to cause service interruptions using a specially crafted mp4 file...
CVE-2015-1208
Integer underflow in the movreaddefault function in libavformat/mov.c in FFmpeg before 2.4.6 allows remote attackers to obtain sensitive information from heap and/or stack memory via a crafted MP4 file...