CVE-2018-14054: Double Free
Published Jul 13, 2018
·Updated
A double free exists in the MP4StringProperty class in mp4property.cpp in MP4v2 2.0.0. A dangling pointer is freed again in the destructor once an exception is triggered.
Affected Software
1 affected component
Techsmith Mp4v2=2.0.0
Event History
Jul 13, 2018
CVE Published
via MITRE·12:00 AM
Data Sourced
via MITRE·12:00 AM
Description
Frequently Asked Questions
1
What is the severity of CVE-2018-14054?
CVE-2018-14054 has a high severity due to the potential for a double free vulnerability, which can lead to memory corruption.
2
How do I fix CVE-2018-14054?
To fix CVE-2018-14054, update to MP4v2 version 2.1.0 or later, where this issue has been addressed.
3
What software is affected by CVE-2018-14054?
CVE-2018-14054 affects MP4v2 version 2.0.0 specifically.
4
What kind of vulnerability is CVE-2018-14054?
CVE-2018-14054 is classified as a double free vulnerability in the MP4StringProperty class.
5
What can happen if CVE-2018-14054 is exploited?
Exploitation of CVE-2018-14054 can result in application crashes or arbitrary code execution due to memory corruption.