CVE-2018-14325: Integer Underflow
Published Jul 16, 2018
·Updated
In MP4v2 2.0.0, there is an integer underflow (with resultant memory corruption) when parsing MP4Atom in mp4atom.cpp.
Affected Software
1 affected component
Techsmith Mp4v2=2.0.0
Event History
Jul 16, 2018
CVE Published
via MITRE·12:00 AM
Data Sourced
via MITRE·12:00 AM
Description
Frequently Asked Questions
1
What is the severity of CVE-2018-14325?
CVE-2018-14325 has a high severity rating due to the potential for memory corruption.
2
How do I fix CVE-2018-14325?
To mitigate CVE-2018-14325, upgrade to version 2.1.0 or later of the Mp4v2 library.
3
What type of vulnerability is CVE-2018-14325?
CVE-2018-14325 is an integer underflow vulnerability that occurs when parsing MP4Atom.
4
Which software versions are affected by CVE-2018-14325?
CVE-2018-14325 affects version 2.0.0 of the Mp4v2 library.
5
What consequences can arise from CVE-2018-14325?
Exploitation of CVE-2018-14325 can lead to memory corruption, potentially allowing arbitrary code execution.