230 matches found
EUVD-2024-55802
MP4v2 through 2.1.3 contains a heap-based out-of-bounds read in MP4File::GetChapters that allows attackers to read past heap allocations via crafted QuickTime chapter samples. Attackers can supply an MP4 file whose chapter sample is shorter than its declared title length, crashing applications li...
CVE-2024-58397
MP4v2 through 2.1.3 contains a heap-based out-of-bounds read in MP4File::GetChapters that allows attackers to read past heap allocations via crafted QuickTime chapter samples. Attackers can supply an MP4 file whose chapter sample is shorter than its declared title length, crashing applications li...
CVE-2024-58397 MP4v2 through 2.1.3 Heap Out-of-Bounds Read via MP4File::GetChapters
MP4v2 through 2.1.3 contains a heap-based out-of-bounds read in MP4File::GetChapters that allows attackers to read past heap allocations via crafted QuickTime chapter samples. Attackers can supply an MP4 file whose chapter sample is shorter than its declared title length, crashing applications li...
CVE-2024-58397
Versions of MP4v2 through 2.1.3 are vulnerable to a heap-based out-of-bounds read in the MP4File::GetChapters() function. An attacker can exploit this by providing a crafted MP4 file where a QuickTime chapter sample is shorter than its declared title length. This allows the attacker to read past ...
CVE-2026-95121
An issue in mp4v2 2.0.0 allows an attacker to execute arbitrary code via the MP4RtpAtom::ReadHntiType in src/atomrtp.cpp. A specially crafted MP4 file can cause an undersized rtp atom to produce a near-2^64 allocation size through an unchecked offset subtraction...
CVE-2026-95122
mp4v2 2.0.0 contains a NULL pointer dereference vulnerability in MP4File::GenerateTracks in src/mp4file.cpp. This allows a remote attacker to cause a denial of service...
CVE-2026-95121
An issue in mp4v2 2.0.0 allows an attacker to execute arbitrary code via the MP4RtpAtom::ReadHntiType in src/atomrtp.cpp. A specially crafted MP4 file can cause an undersized rtp atom to produce a near-2^64 allocation size through an unchecked offset subtraction...
CVE-2026-95122
mp4v2 2.0.0 contains a NULL pointer dereference vulnerability in MP4File::GenerateTracks in src/mp4file.cpp. This allows a remote attacker to cause a denial of service...
CVE-2026-95121
An issue in mp4v2 2.0.0 allows an attacker to execute arbitrary code via the MP4RtpAtom::ReadHntiType in src/atomrtp.cpp. A specially crafted MP4 file can cause an undersized rtp atom to produce a near-2^64 allocation size through an unchecked offset subtraction...
CVE-2026-95121
The mp4v2 library version 2.0.0 is vulnerable to arbitrary code execution due to an integer overflow (CWE-190) in the MP4RtpAtom::ReadHntiType() function located in src/atom_rtp.cpp. An attacker can exploit this by providing a specially crafted MP4 file that causes an undersized rtp atom to trigg...
CVE-2026-95122
The mp4v2 library version 2.0.0 is vulnerable to a NULL pointer dereference within the MP4File::GenerateTracks() function located in src/mp4file.cpp . This security flaw allows a remote attacker to cause a denial of service (DoS). While the documents confirm the vulnerability and provide its CVSS...
CVE-2023-29578
mp4v2 v2.0.0 was discovered to contain a heap buffer overflow via the mp4v2::impl::MP4StringProperty::MP4StringProperty function at src/mp4property.cpp...
EUVD-2018-6247
Malware in sbrugna...
EUVD-2018-6321
Malware in sbrugna...
EUVD-2018-19071
Malware in sbrugna...
EUVD-2018-6299
Malware in sbrugna...
EUVD-2018-5980
Malware in sbrugna...
EUVD-2018-6248
Malware in sbrugna...