mp4v2 project kayıtları
mp4v2 project üreticisine ait 10 yayımlanmış kayıt.
Araştırmacı profili
- KEV’e giren
- 0 · %0
- Silahlaştırılmış
- 0 · %0
- Pre-auth RCE
- 0
- Düzeltme kaydı olan
- %0
- Yayından KEV’e ortanca
- KEV’e giren kayıt yok
Tekrar eden sınıflar
- CWE-401 Missing Release of Memory after Effective Lifetime2
- CWE-404 Improper Resource Shutdown or Release2
- CWE-787 Out-of-bounds Write2
- CWE-119 Improper Restriction of Operations within the Bounds of a Memory Buffer1
- CWE-416 Use After Free1
- CWE-125 Out-of-bounds Read1
Bu üreticide en sık görülen zafiyet sınıfları: nereye bakmalı.
CWESaldırı profili
Tüm kayıtlar
10 kayıt| Aksiyon | CVE | Zafiyet | Ciddiyet | KEV | EPSS | Yayın |
|---|---|---|---|---|---|---|
35İzleyin | CVE-2018-7339İstismar yok | The MP4Atom class in mp4atom.cpp in MP4v2 through 2.0.0 mishandles Entry Number validation for the MP4 Table Property, which allows remote amp4v2 project · mp4v2 · CWE-119 | Yüksek8,8 | — | %1,4 | 23 Şub 2018 |
35İzleyin | CVE-2023-29584İstismar yok | mp4v2 v2.0.0 was discovered to contain a heap buffer overflow via the MP4GetVideoProfileLevel function at /src/mp4.cpp.mp4v2 project · mp4v2 · CWE-787 | Yüksek8,8 | — | %0,8 | 14 Nis 2023 |
35İzleyin | CVE-2023-29578İstismar yok | mp4v2 v2.0.0 was discovered to contain a heap buffer overflow via the mp4v2::impl::MP4StringProperty::~MP4StringProperty() function at src/mmp4v2 project · mp4v2 · CWE-787 | Yüksek8,8 | — | %0,8 | 24 Nis 2023 |
35İzleyin | CVE-2023-33718İstismar yok | mp4v2 v2.1.3 was discovered to contain a memory leak via MP4File::ReadString() at mp4file_io.cppmp4v2 project · mp4v2 · CWE-401 | Yüksek8,8 | — | %0,7 | 31 May 2023 |
26İzleyin | CVE-2018-17236İstismar yok | The function MP4Free() in mp4property.cpp in libmp4v2 2.1.0 internally calls free() on a invalid pointer, raising a SIGABRT signal.mp4v2 project · mp4v2 · CWE-416 | Orta6,5 | — | %1,1 | 20 Eyl 2018 |
26İzleyin | CVE-2018-17235İstismar yok | The function mp4v2::impl::MP4Track::FinishSdtp() in mp4track.cpp in libmp4v2 2.1.0 mishandles compatibleBrand while processing a crafted mp4mp4v2 project · mp4v2 · CWE-125 | Orta6,5 | — | %1,1 | 20 Eyl 2018 |
26İzleyin | CVE-2023-33720İstismar yok | mp4v2 v2.1.2 was discovered to contain a memory leak via the class MP4BytesProperty.mp4v2 project · mp4v2 · CWE-400 | Orta6,5 | — | %0,6 | 26 May 2023 |
22İzleyin | CVE-2023-1450İstismar yok | MP4v2 mp4trackdump.cpp DumpTrack denial of servicemp4v2 project · mp4v2 · CWE-404 | Orta5,5 | — | %0,4 | 17 Mar 2023 |
22İzleyin | CVE-2023-1451İstismar yok | MP4v2 mp4track.cpp GetSampleFileOffset denial of servicemp4v2 project · mp4v2 · CWE-404 | Orta5,5 | — | %0,4 | 17 Mar 2023 |
22İzleyin | CVE-2023-33717İstismar yok | mp4v2 v2.1.3 was discovered to contain a memory leak when a method calling MP4File::ReadBytes() had allocated memory but did not catch excepmp4v2 project · mp4v2 · CWE-401 | Orta5,5 | — | %0,3 | 2 Haz 2023 |
- CVE-2018-733935İzleyin
The MP4Atom class in mp4atom.cpp in MP4v2 through 2.0.0 mishandles Entry Number validation for the MP4 Table Property, which allows remote a
YüksekCVSS 8,8İstismar yokEPSS %1mp4v2 project · mp4v223 Şub 2018
- CVE-2023-2958435İzleyin
mp4v2 v2.0.0 was discovered to contain a heap buffer overflow via the MP4GetVideoProfileLevel function at /src/mp4.cpp.
YüksekCVSS 8,8İstismar yokEPSS %1mp4v2 project · mp4v214 Nis 2023
- CVE-2023-2957835İzleyin
mp4v2 v2.0.0 was discovered to contain a heap buffer overflow via the mp4v2::impl::MP4StringProperty::~MP4StringProperty() function at src/m
YüksekCVSS 8,8İstismar yokEPSS %1mp4v2 project · mp4v224 Nis 2023
- CVE-2023-3371835İzleyin
mp4v2 v2.1.3 was discovered to contain a memory leak via MP4File::ReadString() at mp4file_io.cpp
YüksekCVSS 8,8İstismar yokEPSS %1mp4v2 project · mp4v231 May 2023
- CVE-2018-1723626İzleyin
The function MP4Free() in mp4property.cpp in libmp4v2 2.1.0 internally calls free() on a invalid pointer, raising a SIGABRT signal.
OrtaCVSS 6,5İstismar yokEPSS %1mp4v2 project · mp4v220 Eyl 2018
- CVE-2018-1723526İzleyin
The function mp4v2::impl::MP4Track::FinishSdtp() in mp4track.cpp in libmp4v2 2.1.0 mishandles compatibleBrand while processing a crafted mp4
OrtaCVSS 6,5İstismar yokEPSS %1mp4v2 project · mp4v220 Eyl 2018
- CVE-2023-3372026İzleyin
mp4v2 v2.1.2 was discovered to contain a memory leak via the class MP4BytesProperty.
OrtaCVSS 6,5İstismar yokEPSS %1mp4v2 project · mp4v226 May 2023
- CVE-2023-145022İzleyin
MP4v2 mp4trackdump.cpp DumpTrack denial of service
OrtaCVSS 5,5İstismar yokEPSS %0mp4v2 project · mp4v217 Mar 2023
- CVE-2023-145122İzleyin
MP4v2 mp4track.cpp GetSampleFileOffset denial of service
OrtaCVSS 5,5İstismar yokEPSS %0mp4v2 project · mp4v217 Mar 2023
- CVE-2023-3371722İzleyin
mp4v2 v2.1.3 was discovered to contain a memory leak when a method calling MP4File::ReadBytes() had allocated memory but did not catch excep
OrtaCVSS 5,5İstismar yokEPSS %0mp4v2 project · mp4v22 Haz 2023