PT-2024-5858

Name of the Vulnerable Software and Affected Versions NGINX Open Source and NGINX Plus versions prior to 1.26.2 NGINX Open Source and NGINX Plus versions prior to 1.27.1 Description The issue is related to a buffer overread vulnerability in the ngx http mp4 module, which might allow an attacker t...

PT-2022-5185

Name of the Vulnerable Software and Affected Versions NGINX Open Source versions 1.23.2 and 1.22.1 and earlier NGINX Open Source Subscription versions R2 P1 and R1 P1 and earlier NGINX Plus versions R27 P1 and R26 P1 and earlier Description The issue is related to a buffer-over-read vulnerability...

PT-2018-2563

Name of the Vulnerable Software and Affected Versions nginx versions 1.15.6 and earlier, 1.14.1 and earlier Description The issue is related to the ngx http mp4 module in nginx, which might allow an attacker to cause an infinite loop in a worker process, cause a worker process crash, or result in...

PT-2012-3799

Name of the Vulnerable Software and Affected Versions nginx versions 1.0.7 through 1.0.14 nginx versions 1.1.3 through 1.1.18 Description A buffer overflow in the ngx http mp4 module module, when the mp4 directive is used, allows remote attackers to cause a denial of service or possibly execute...