CVE-2026-107390

music-metadata is a metadata parser for audio and video media files. Prior to 11.16.0, the MP4 parser accepts an attacker-controlled 64-bit extended atom size, converts it to a JavaScript Number, and uses the resulting payload length for atom-specific readToken calls before proving that the atom...

CVE-2026-107390

music-metadata is a metadata parser for audio and video media files. Prior to 11.16.0, the MP4 parser accepts an attacker-controlled 64-bit extended atom size, converts it to a JavaScript Number, and uses the resulting payload length for atom-specific readToken calls before proving that the atom...

EUVD-2026-95244

music-metadata is a metadata parser for audio and video media files. Prior to 11.16.0, the MP4 parser accepts an attacker-controlled 64-bit extended atom size, converts it to a JavaScript Number, and uses the resulting payload length for atom-specific readToken calls before proving that the atom...

CVE-2026-107390 music-metadata: MP4 parser allows memory exhaustion via oversized extended atom length

music-metadata is a metadata parser for audio and video media files. Prior to 11.16.0, the MP4 parser accepts an attacker-controlled 64-bit extended atom size, converts it to a JavaScript Number, and uses the resulting payload length for atom-specific readToken calls before proving that the atom...

PT-2026-108170

Name of the Vulnerable Software and Affected Versions music-metadata versions prior to 11.16.0 Description The MP4 parser accepts an attacker-controlled 64-bit extended atom size and converts it to a JavaScript Number. This resulting payload length is used for atom-specific readToken calls before...

CVE-2026-107390: Memory Allocation with Excessive Size Value

music-metadata is a metadata parser for audio and video media files. Prior to 11.16.0, the MP4 parser accepts an attacker-controlled 64-bit extended atom size, converts it to a JavaScript Number, and uses the resulting payload length for atom-specific readToken calls before proving that the atom...

EUVD-2014-4894

Malware in sbrugna...

Security update for gstreamer-plugins-good

This update for gstreamer-plugins-good fixes the following issues: CVE-2025-47183: Fixed out-of-bounds read when parsing mvhd box bsc1244406. Patch Instructions: To install this SUSE update use the SUSE recommended installation methods like YaST onlineupdate or "zypper patch". Alternatively you c...

SUSE-SU-2025:02303-1 Security update for gstreamer-plugins-good

This update for gstreamer-plugins-good fixes the following issues: - CVE-2025-47183: Fixed out-of-bounds read when parsing mvhd box bsc1244406...

Apple QuickTime < 7.7.8 Multiple Vulnerabilities

Binary data 9305.prm...

Apple Quicktime Invalid mvhd Atom Size Denial of Service Vulnerability

Talos Vulnerability Report TALOS-2015-0014 Apple Quicktime Invalid mvhd Atom Size Denial of Service Vulnerability August 13, 2015 CVE Number CVE-2015-3790 Description There is a denial of service vulnerability in Apple Quicktime. An attacker who can control the size of an mvhd atom can cause an...

Memory corruption

Apple QuickTime allows remote attackers to execute arbitrary code or cause a denial of service memory corruption via a malformed version number and flags in an mvhd atom...

CVE-2014-4979

Apple QuickTime allows remote attackers to execute arbitrary code or cause a denial of service memory corruption via a malformed version number and flags in an mvhd atom...

CVE-2014-4979: Improper Restriction of Operations within the Bounds of a Memory Buffer

Apple QuickTime allows remote attackers to execute arbitrary code or cause a denial of service memory corruption via a malformed version number and flags in an mvhd atom...

KLA10442 DoS vulnerability in QuickTime

An unknown vulnerability have been found in Apple QuickTime. Vulnerability can be exploited remotely via specially designed mvhd atom. Original advisories Apple bulletin Exploitation Related products Apple-QuickTime CVE list CVE-2014-4979 critical Solution Update to latest version Quicktime...

(0Day) Apple QuickTime 'mvhd' Atom Heap Memory Corruption Remote Code Execution Vulnerability

This vulnerability allows remote attackers to execute arbitrary code on vulnerable installations of Apple QuickTime. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file. The specific flaw exists within the 'mvhd' atom...

PT-2014-6241

Name of the Vulnerable Software and Affected Versions Apple QuickTime affected versions not specified Description The issue allows remote attackers to execute arbitrary code or cause a denial of service due to memory corruption. This is achieved via a malformed version number and flags in an mvhd...

Apple QuickTime mvhd Atom Parsing Remote Code Execution Vulnerability

This vulnerability allows remote attackers to execute arbitrary code on vulnerable installations of Apple QuickTime. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file. The specific flaw exists within the handling of...

CVE-2013-1022

Buffer overflow in Apple QuickTime before 7.7.4 allows remote attackers to execute arbitrary code or cause a denial of service application crash via crafted mvhd atoms in a movie file...

Buffer overflow

Buffer overflow in Apple QuickTime before 7.7.4 allows remote attackers to execute arbitrary code or cause a denial of service application crash via crafted mvhd atoms in a movie file...