CVE-2018-14326

In MP4v2 2.0.0, there is an integer overflow with resultant memory corruption when resizing MP4Array for the ftyp atom in mp4array.h...

UBUNTU-CVE-2018-14325

In MP4v2 2.0.0, there is an integer underflow with resultant memory corruption when parsing MP4Atom in mp4atom.cpp...

CVE-2018-14326

In MP4v2 2.0.0, there is an integer overflow with resultant memory corruption when resizing MP4Array for the ftyp atom in mp4array.h...

PT-2018-12440 · Mp4V2 · Mp4V2

Name of the Vulnerable Software and Affected Versions: MP4v2 version 2.0.0 Description: The issue arises from an integer underflow that leads to memory corruption when parsing MP4Atom in mp4atom.cpp. Recommendations: For MP4v2 version 2.0.0, at the moment, there is no information about a newer...

CVE-2018-14325

CVE-2018-14325 affects MP4v2 2.0.0, where parsing MP4Atom in mp4atom.cpp can trigger an integer underflow leading to memory corruption. Public sources in the connected documents confirm the root cause is an underflow in MP4Atom parsing, with the vulnerability being exploitable via crafted MP4 fil...

PT-2018-12441 · Mp4V2 · Mp4V2

Name of the Vulnerable Software and Affected Versions: MP4v2 version 2.0.0 Description: The issue is related to an integer overflow that results in memory corruption when resizing MP4Array for the ftyp atom in mp4array.h. Recommendations: For MP4v2 version 2.0.0, at the moment, there is no...

CVE-2018-14326

Removed by vendor...

CVE-2018-14326

CVE-2018-14326 affects libmp4v2 (MP4v2) 2.0.0, where resizing MP4Array for the ftyp atom in mp4array.h triggers an integer overflow that leads to memory corruption. Connected advisories confirm the issue is addressed in later libmp4v2 packages (e.g., 2.1.0), and Mageia/OpenVAS updates list the CV...

CVE-2018-14326

In MP4v2 2.0.0, there is an integer overflow with resultant memory corruption when resizing MP4Array for the ftyp atom in mp4array.h...

CVE-2018-14325

In MP4v2 2.0.0, there is an integer underflow with resultant memory corruption when parsing MP4Atom in mp4atom.cpp...

CVE-2018-14325

Removed by vendor...

Double free

A double free exists in the MP4StringProperty class in mp4property.cpp in MP4v2 2.0.0. A dangling pointer is freed again in the destructor once an exception is triggered...

CVE-2018-14054

A double free exists in the MP4StringProperty class in mp4property.cpp in MP4v2 2.0.0. A dangling pointer is freed again in the destructor once an exception is triggered...

UBUNTU-CVE-2018-14054

A double free exists in the MP4StringProperty class in mp4property.cpp in MP4v2 2.0.0. A dangling pointer is freed again in the destructor once an exception is triggered...

CVE-2018-14054

A double free exists in the MP4StringProperty class in mp4property.cpp in MP4v2 2.0.0. A dangling pointer is freed again in the destructor once an exception is triggered...

CVE-2018-14054

A double free exists in the MP4StringProperty class in mp4property.cpp in MP4v2 2.0.0. A dangling pointer is freed again in the destructor once an exception is triggered...

CVE-2018-14054

Removed by vendor...

CVE-2018-14054

Technical details about CVE-2018-14054 are not publicly available in the provided connected documents; the initial entry notes a double-free in MP4v2 2.0.0's MP4StringProperty with destructor handling an exception.

CVE-2018-14054

A double free exists in the MP4StringProperty class in mp4property.cpp in MP4v2 2.0.0. A dangling pointer is freed again in the destructor once an exception is triggered...

MP4v2 Denial of Service Vulnerability

MP4v2 is an open source library written in C++ for handling MP4 containers. A security vulnerability exists in the MP4Atom class of the mp4atom.cpp file in MP4v2 2.0.0 and earlier versions, which stems from the program's failure to properly handle Entry Number validation. A remote attacker can...