CVE-2023-45511

A memory leak in tsMuxer version git-2539d07 allows attackers to cause a Denial of Service DoS via a crafted MP4 file...

CVE-2023-45511

A memory leak in tsMuxer version git-2539d07 allows attackers to cause a Denial of Service DoS via a crafted MP4 file...

CVE-2023-45511

CVE-2023-45511 affects tsMuxer, version git-2539d07, due to a memory leak that can trigger a Denial of Service when processing a crafted MP4 file. Some sources note a PoC exists; remediation is to upgrade to a newer tsMuxer version that includes a fix (per PT-2023-29567). The vulnerability detail...

CVE-2021-42265 Adobe Premiere Pro MP4 File Parsing Out-Of-Bounds Read Information Disclosure Vulnerability

Adobe Premiere Pro versions 22.0 and earlier and 15.4.2 and earlier are affected by an out-of-bounds read vulnerability that could lead to disclosure of sensitive memory. An attacker could leverage this vulnerability to bypass mitigations such as ASLR. Exploitation of this issue requires user...

CVE-2021-43751 Adobe Premiere Pro MP4 File Parsing Out-Of-Bounds Read Information Disclosure Vulnerability

Adobe Premiere Pro versions 22.0 and earlier and 15.4.2 and earlier are affected by an out-of-bounds read vulnerability that could lead to disclosure of sensitive memory. An attacker could leverage this vulnerability to bypass mitigations such as ASLR. Exploitation of this issue requires user...

The vulnerability of the MP4SdpAtom::Read() function in the atom_sdp.cpp component of the library for creating, modifying, and reading MP4 files, mp4v2, allows a malicious actor to cause a service failure.

The vulnerability of the MP4SdpAtom::Read function in the atomsdp.cpp component of the library for creating, modifying, and reading MP4 files in mp4v2 is related to a memory leak. Exploiting this vulnerability could allow an attacker to cause a service failure...

CVE-2021-43759

Adobe Media Encoder versions 22.0, 15.4.2 and earlier are affected by an out-of-bounds read vulnerability that could lead to disclosure of sensitive memory. An attacker could leverage this vulnerability to bypass mitigations such as ASLR. Exploitation of this issue requires user interaction in th...

Design/Logic Flaw

Adobe Media Encoder versions 22.0, 15.4.2 and earlier are affected by an out-of-bounds read vulnerability that could lead to disclosure of sensitive memory. An attacker could leverage this vulnerability to bypass mitigations such as ASLR. Exploitation of this issue requires user interaction in th...

CVE-2021-43759 Adobe Media Encoder MP4 File Parsing Out-Of-Bounds Read Information Disclosure Vulnerability

Adobe Media Encoder versions 22.0, 15.4.2 and earlier are affected by an out-of-bounds read vulnerability that could lead to disclosure of sensitive memory. An attacker could leverage this vulnerability to bypass mitigations such as ASLR. Exploitation of this issue requires user interaction in th...

CVE-2021-43759

CVE-2021-43759 affects Adobe Media Encoder versions 22.0, 15.4.2 (and earlier). An out-of-bounds read could disclose memory and, by bypassing ASLR, enable information disclosure; exploitation requires the victim to open a malicious MP4 file. The issue is addressed in APSB21-118 with updates, and ...

CVE-2021-43758

Adobe Media Encoder CVE-2021-43758 is an out-of-bounds read vulnerability affecting version 22.0 and 15.4.2 (and earlier). The issue can disclose sensitive memory and bypass ASLR, with exploitation requiring a user to open a malicious MP4 file. A patch is available via Adobe APSB21-118; updated v...

K24374526: nginx vulnerability CVE-2018-16845

Security Advisory Description nginx before versions 1.15.6, 1.14.1 has a vulnerability in the ngxhttpmp4module, which might allow an attacker to cause infinite loop in a worker process, cause a worker process crash, or might result in worker process memory disclosure by using a specially crafted...

SUSE CVE-2012-2089

Buffer overflow in ngxhttpmp4module.c in the ngxhttpmp4module module in nginx 1.0.7 through 1.0.14 and 1.1.3 through 1.1.18, when the mp4 directive is used, allows remote attackers to cause a denial of service memory overwrite or possibly execute arbitrary code via a crafted MP4 file...

SUSE CVE-2015-1208

Integer underflow in the movreaddefault function in libavformat/mov.c in FFmpeg before 2.4.6 allows remote attackers to obtain sensitive information from heap and/or stack memory via a crafted MP4 file...

SUSE CVE-2015-7213

Integer overflow in the MPEG4Extractor::readMetaData function in MPEG4Extractor.cpp in libstagefright in Mozilla Firefox before 43.0 and Firefox ESR 38.x before 38.5 on 64-bit platforms allows remote attackers to execute arbitrary code via a crafted MP4 video file that triggers a buffer overflow...

SUSE CVE-2017-9126

The quicktimereaddreftable function in dref.c in libquicktime 1.2.4 allows remote attackers to cause a denial of service heap-based buffer overflow and application crash via a crafted mp4 file...

SUSE CVE-2017-9128

The quicktimevideowidth function in lqtquicktime.c in libquicktime 1.2.4 allows remote attackers to cause a denial of service heap-based buffer over-read and application crash via a crafted mp4 file...

Updated nginx packages fix security vulnerability

Two security issues were identified in the ngxhttpmp4module, which might allow an attacker to cause a worker process crash or worker process memory disclosure by using a specially crafted mp4 file, or might have potential other impact. CVE-2022-41741, CVE-2022-41742...

nginx -- Two vulnerabilities

NGINX Development Team reports: Two security issues were identified in the ngxhttpmp4module, which might allow an attacker to cause a worker process crash or worker process memory disclosure by using a specially crafted mp4 file, or might have potential other impact CVE-2022-41741, CVE-2022-41742...

Bento4 AP4_AtomFactory::CreateAtomFromStream Denial of Service Vulnerability

Bento4 is an open source C library for reading and writing MP4 files. Bento4 v1.6.0-639 contains a denial of service vulnerability that stems from a memory leak in the AP4AtomFactory::CreateAtomFromStream method of the mp4split component. An attacker could exploit the vulnerability to cause a...