Heap overflow

The function mp4v2::impl::MP4Track::FinishSdtp in mp4track.cpp in libmp4v2 2.1.0 mishandles compatibleBrand while processing a crafted mp4 file, which leads to a heap-based buffer over-read, causing denial of service...

CVE-2018-17235

The function mp4v2::impl::MP4Track::FinishSdtp in mp4track.cpp in libmp4v2 2.1.0 mishandles compatibleBrand while processing a crafted mp4 file, which leads to a heap-based buffer over-read, causing denial of service...

CVE-2018-17235

The function mp4v2::impl::MP4Track::FinishSdtp in mp4track.cpp in libmp4v2 2.1.0 mishandles compatibleBrand while processing a crafted mp4 file, which leads to a heap-based buffer over-read, causing denial of service...

UBUNTU-CVE-2018-17235

The function mp4v2::impl::MP4Track::FinishSdtp in mp4track.cpp in libmp4v2 2.1.0 mishandles compatibleBrand while processing a crafted mp4 file, which leads to a heap-based buffer over-read, causing denial of service...

PT-2018-13960 · Videolan · Libmp4V2

Name of the Vulnerable Software and Affected Versions: libmp4v2 version 2.1.0 Description: The issue arises from the function mp4v2::impl::MP4Track::FinishSdtp in mp4track.cpp, which mishandles compatibleBrand while processing a crafted mp4 file. This leads to a heap-based buffer over-read,...

CVE-2018-17235

Removed by vendor...

CVE-2018-14446

MP4Integer32Property::Read in atomavcC.cpp in MP4v2 2.1.0 allows remote attackers to cause a denial of service heap-based buffer overflow and application crash or possibly have unspecified other impact via a crafted MP4 file...

CVE-2018-14446

MP4Integer32Property::Read in atomavcC.cpp in MP4v2 2.1.0 allows remote attackers to cause a denial of service heap-based buffer overflow and application crash or possibly have unspecified other impact via a crafted MP4 file...

Heap overflow

MP4Integer32Property::Read in atomavcC.cpp in MP4v2 2.1.0 allows remote attackers to cause a denial of service heap-based buffer overflow and application crash or possibly have unspecified other impact via a crafted MP4 file...

CVE-2018-14446

MP4Integer32Property::Read in atomavcC.cpp in MP4v2 2.1.0 allows remote attackers to cause a denial of service heap-based buffer overflow and application crash or possibly have unspecified other impact via a crafted MP4 file...

CVE-2018-14446

Removed by vendor...

PT-2018-12523 · Mp4V2 · Mp4V2

Name of the Vulnerable Software and Affected Versions: MP4v2 version 2.1.0 Description: The issue allows remote attackers to cause a denial of service, which may lead to a heap-based buffer overflow and application crash, or possibly have other unspecified impacts. This can be achieved via a...

CVE-2018-14446: Out-of-bounds Write

MP4Integer32Property::Read in atomavcC.cpp in MP4v2 2.1.0 allows remote attackers to cause a denial of service heap-based buffer overflow and application crash or possibly have unspecified other impact via a crafted MP4 file...

CVE-2018-14446

CVE-2018-14446 affects the MP4v2 library: MP4Integer32Property::Read in atom_avcC.cpp in MP4v2 2.1.0 permits remote attackers to trigger a denial of service (heap-based buffer overflow and application crash) or potentially other impact via a crafted MP4 file. Public materials identify the vulnera...

CVE-2018-14446

MP4Integer32Property::Read in atomavcC.cpp in MP4v2 2.1.0 allows remote attackers to cause a denial of service heap-based buffer overflow and application crash or possibly have unspecified other impact via a crafted MP4 file...

CVE-2018-14403

MP4NameFirstMatches in mp4util.cpp in MP4v2 2.0.0 mishandles substrings of atom names, leading to use of an inappropriate data type for associated atoms. The resulting type confusion can cause out-of-bounds memory access...

Type confusion

MP4NameFirstMatches in mp4util.cpp in MP4v2 2.0.0 mishandles substrings of atom names, leading to use of an inappropriate data type for associated atoms. The resulting type confusion can cause out-of-bounds memory access...

CVE-2018-14403

MP4NameFirstMatches in mp4util.cpp in MP4v2 2.0.0 mishandles substrings of atom names, leading to use of an inappropriate data type for associated atoms. The resulting type confusion can cause out-of-bounds memory access...

CVE-2018-14403

MP4NameFirstMatches in mp4util.cpp in MP4v2 2.0.0 mishandles substrings of atom names, leading to use of an inappropriate data type for associated atoms. The resulting type confusion can cause out-of-bounds memory access...

CVE-2018-14403: Incorrect Type Conversion or Cast

MP4NameFirstMatches in mp4util.cpp in MP4v2 2.0.0 mishandles substrings of atom names, leading to use of an inappropriate data type for associated atoms. The resulting type confusion can cause out-of-bounds memory access...