CVE-2023-1451

A vulnerability was found in MP4v2 2.1.2. It has been classified as problematic. Affected is the function mp4v2::impl::MP4Track::GetSampleFileOffset of the file mp4track.cpp. The manipulation leads to denial of service. An attack has to be approached locally. The exploit has been disclosed to the...

CVE-2018-17235

The CVE-2018-17235 entry concerns libmp4v2 version 2.1.0. The flaw resides in mp4v2::impl::MP4Track::FinishSdtp() in mp4track.cpp, where mishandling of compatibleBrand while processing a crafted MP4 file leads to a heap-based buffer over-read and a denial of service. The description is consistent...