QwikSec

Security Database

CVE

CWE

Training

CVE-2018-14379

Published: Jul 18, 2018

Modified: Aug 5, 2024

PUBLISHED

Description

MP4Atom::factory in mp4atom.cpp in MP4v2 2.0.0 incorrectly uses the MP4ItemAtom data type in a certain case where MP4DataAtom is required, which allows remote attackers to cause a denial of service (memory corruption) or possibly have unspecified other impact via a crafted MP4 file, because access to the data structure has different expectations about layout as a result of this type confusion.

Vendor	Product	Versions
n/a	n/a	affected `n/a`

References

http://www.openwall.com/lists/oss-security/2018/07/17/1

FEDORA-2019-d53d4a79ac

vendor-advisory

FEDORA-2019-1030f4816a

vendor-advisory

FEDORA-2019-6469ad8129

vendor-advisory

https://github.com/enzo1982/mp4v2/releases/tag/v2.1.0

Security Training

Train your team to recognize and prevent security threats with our comprehensive security awareness program.

Vulnerability Scanning

Discover vulnerabilities in your applications and infrastructure before attackers do.