CoreCVE
Back

MEDIUM

The function mp4v2::impl::MP4Track::FinishSdtp() in mp4track.cpp in libmp4v2 2.1.0 mishandles compatibleBrand while processing a crafted mp4 file, which leads to a heap-based buffer over-read, causing denial of service

Published Sep 20, 2018

Description

The function mp4v2::impl::MP4Track::FinishSdtp() in mp4track.cpp in libmp4v2 2.1.0 mishandles compatibleBrand while processing a crafted mp4 file, which leads to a heap-based buffer over-read, causing denial of service.

Affected products

Remediation

No remediation recorded yet.

Metrics

Weaknesses (1)

CWE-125

Out-of-bounds Read

References (2)

Change history (0)

No recorded changes yet.

Sources
CVE.org / MITRE
Status PUBLISHED
Assigner mitre
Published Sep 20, 2018
Updated Aug 5, 2024
Reserved Sep 20, 2018
Link CVE-2018-17235
CISA Vulnrichment
Updated n/a
NVD
Status Modified
Modified Jun 17, 2026
Link CVE-2018-17235
Red Hat
Severity n/a
Public date n/a
Links CVE-2018-17235