mp4v2 project records
10 published records for vendor mp4v2 project.
Researcher profile
- Entered KEV
- 0 · 0%
- Weaponized
- 0 · 0%
- Pre-auth RCE
- 0
- With a fix record
- 0%
- Median publish → KEV
- No record has entered KEV
Recurring classes
- CWE-401 Missing Release of Memory after Effective Lifetime2
- CWE-404 Improper Resource Shutdown or Release2
- CWE-787 Out-of-bounds Write2
- CWE-119 Improper Restriction of Operations within the Bounds of a Memory Buffer1
- CWE-416 Use After Free1
- CWE-125 Out-of-bounds Read1
The weakness classes this vendor ships most often: where to look.
CWEAttack profile
All records
10 records| Action | CVE | Vulnerability | Severity | KEV | EPSS | Published |
|---|---|---|---|---|---|---|
35Monitor | CVE-2018-7339No exploit | The MP4Atom class in mp4atom.cpp in MP4v2 through 2.0.0 mishandles Entry Number validation for the MP4 Table Property, which allows remote amp4v2 project · mp4v2 · CWE-119 | High8.8 | — | 1.3% | Feb 23, 2018 |
35Monitor | CVE-2023-29584No exploit | mp4v2 v2.0.0 was discovered to contain a heap buffer overflow via the MP4GetVideoProfileLevel function at /src/mp4.cpp.mp4v2 project · mp4v2 · CWE-787 | High8.8 | — | 0.8% | Apr 14, 2023 |
35Monitor | CVE-2023-29578No exploit | mp4v2 v2.0.0 was discovered to contain a heap buffer overflow via the mp4v2::impl::MP4StringProperty::~MP4StringProperty() function at src/mmp4v2 project · mp4v2 · CWE-787 | High8.8 | — | 0.7% | Apr 24, 2023 |
35Monitor | CVE-2023-33718No exploit | mp4v2 v2.1.3 was discovered to contain a memory leak via MP4File::ReadString() at mp4file_io.cppmp4v2 project · mp4v2 · CWE-401 | High8.8 | — | 0.7% | May 31, 2023 |
26Monitor | CVE-2018-17236No exploit | The function MP4Free() in mp4property.cpp in libmp4v2 2.1.0 internally calls free() on a invalid pointer, raising a SIGABRT signal.mp4v2 project · mp4v2 · CWE-416 | Medium6.5 | — | 1.1% | Sep 20, 2018 |
26Monitor | CVE-2018-17235No exploit | The function mp4v2::impl::MP4Track::FinishSdtp() in mp4track.cpp in libmp4v2 2.1.0 mishandles compatibleBrand while processing a crafted mp4mp4v2 project · mp4v2 · CWE-125 | Medium6.5 | — | 1.0% | Sep 20, 2018 |
26Monitor | CVE-2023-33720No exploit | mp4v2 v2.1.2 was discovered to contain a memory leak via the class MP4BytesProperty.mp4v2 project · mp4v2 · CWE-400 | Medium6.5 | — | 0.6% | May 26, 2023 |
22Monitor | CVE-2023-1450No exploit | MP4v2 mp4trackdump.cpp DumpTrack denial of servicemp4v2 project · mp4v2 · CWE-404 | Medium5.5 | — | 0.3% | Mar 17, 2023 |
22Monitor | CVE-2023-1451No exploit | MP4v2 mp4track.cpp GetSampleFileOffset denial of servicemp4v2 project · mp4v2 · CWE-404 | Medium5.5 | — | 0.3% | Mar 17, 2023 |
22Monitor | CVE-2023-33717No exploit | mp4v2 v2.1.3 was discovered to contain a memory leak when a method calling MP4File::ReadBytes() had allocated memory but did not catch excepmp4v2 project · mp4v2 · CWE-401 | Medium5.5 | — | 0.2% | Jun 2, 2023 |
- CVE-2018-733935Monitor
The MP4Atom class in mp4atom.cpp in MP4v2 through 2.0.0 mishandles Entry Number validation for the MP4 Table Property, which allows remote a
HighCVSS 8.8No exploitEPSS 1%mp4v2 project · mp4v2Feb 23, 2018
- CVE-2023-2958435Monitor
mp4v2 v2.0.0 was discovered to contain a heap buffer overflow via the MP4GetVideoProfileLevel function at /src/mp4.cpp.
HighCVSS 8.8No exploitEPSS 0%mp4v2 project · mp4v2Apr 14, 2023
- CVE-2023-2957835Monitor
mp4v2 v2.0.0 was discovered to contain a heap buffer overflow via the mp4v2::impl::MP4StringProperty::~MP4StringProperty() function at src/m
HighCVSS 8.8No exploitEPSS 0%mp4v2 project · mp4v2Apr 24, 2023
- CVE-2023-3371835Monitor
mp4v2 v2.1.3 was discovered to contain a memory leak via MP4File::ReadString() at mp4file_io.cpp
HighCVSS 8.8No exploitEPSS 0%mp4v2 project · mp4v2May 31, 2023
- CVE-2018-1723626Monitor
The function MP4Free() in mp4property.cpp in libmp4v2 2.1.0 internally calls free() on a invalid pointer, raising a SIGABRT signal.
MediumCVSS 6.5No exploitEPSS 1%mp4v2 project · mp4v2Sep 20, 2018
- CVE-2018-1723526Monitor
The function mp4v2::impl::MP4Track::FinishSdtp() in mp4track.cpp in libmp4v2 2.1.0 mishandles compatibleBrand while processing a crafted mp4
MediumCVSS 6.5No exploitEPSS 1%mp4v2 project · mp4v2Sep 20, 2018
- CVE-2023-3372026Monitor
mp4v2 v2.1.2 was discovered to contain a memory leak via the class MP4BytesProperty.
MediumCVSS 6.5No exploitEPSS 0%mp4v2 project · mp4v2May 26, 2023
- CVE-2023-145022Monitor
MP4v2 mp4trackdump.cpp DumpTrack denial of service
MediumCVSS 5.5No exploitEPSS 0%mp4v2 project · mp4v2Mar 17, 2023
- CVE-2023-145122Monitor
MP4v2 mp4track.cpp GetSampleFileOffset denial of service
MediumCVSS 5.5No exploitEPSS 0%mp4v2 project · mp4v2Mar 17, 2023
- CVE-2023-3371722Monitor
mp4v2 v2.1.3 was discovered to contain a memory leak when a method calling MP4File::ReadBytes() had allocated memory but did not catch excep
MediumCVSS 5.5No exploitEPSS 0%mp4v2 project · mp4v2Jun 2, 2023