Lucene search

K
veracodeVeracode Vulnerability DatabaseVERACODE:42034
HistoryAug 04, 2023 - 4:19 a.m.

Heap-based Buffer Overflow

2023-08-0404:19:07
Veracode Vulnerability Database
sca.analysiscenter.veracode.com
6
libmp4v2.so
heap-based buffer overflow
resize function
mp4array.h
memory allocation

CVSS3

8.8

Attack Vector

NETWORK

Attack Complexity

LOW

Privileges Required

NONE

User Interaction

REQUIRED

Scope

UNCHANGED

Confidentiality Impact

HIGH

Integrity Impact

HIGH

Availability Impact

HIGH

CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H

EPSS

0.002

Percentile

59.6%

libmp4v2.so is vulnerable to Heap-based Buffer Overflow. The vulnerability is due to not validating the input parameter newSize of function Resize in the file mp4array.h . This can lead to buffer overflow while allocating memory to MP4Array array.

CVSS3

8.8

Attack Vector

NETWORK

Attack Complexity

LOW

Privileges Required

NONE

User Interaction

REQUIRED

Scope

UNCHANGED

Confidentiality Impact

HIGH

Integrity Impact

HIGH

Availability Impact

HIGH

CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H

EPSS

0.002

Percentile

59.6%