CVE-2018-14403: Incorrect Type Cast
Published Jul 19, 2018
·Updated
MP4NameFirstMatches in mp4util.cpp in MP4v2 2.0.0 mishandles substrings of atom names, leading to use of an inappropriate data type for associated atoms. The resulting type confusion can cause out-of-bounds memory access.
Affected Software
1 affected component
Techsmith Mp4v2=2.0.0
Event History
Jul 19, 2018
CVE Published
via MITRE·12:00 AM
Data Sourced
via MITRE·12:00 AM
Description
Frequently Asked Questions
1
What is the severity of CVE-2018-14403?
CVE-2018-14403 is rated as a high severity vulnerability due to potential out-of-bounds memory access.
2
How do I fix CVE-2018-14403?
To mitigate CVE-2018-14403, upgrade to MP4v2 version 2.1.0 or later.
3
What is affected by CVE-2018-14403?
CVE-2018-14403 affects MP4v2 version 2.0.0.
4
What type of vulnerability is CVE-2018-14403?
CVE-2018-14403 is a type confusion vulnerability that can lead to memory access issues.
5
What could happen if CVE-2018-14403 is exploited?
Exploitation of CVE-2018-14403 could result in a crash or arbitrary code execution due to out-of-bounds memory access.