CVE-2018-17235: Medium severity mp4v2 vulnerability
Published Sep 20, 2018
·Updated
The function mp4v2::impl::MP4Track::FinishSdtp() in mp4track.cpp in libmp4v2 2.1.0 mishandles compatibleBrand while processing a crafted mp4 file, which leads to a heap-based buffer over-read, causing denial of service.
Affected Software
1 affected component
Mp4v2 Project Mp4v2=2.1.0
Event History
Sep 20, 2018
CVE Published
via MITRE·12:00 AM
Data Sourced
via MITRE·12:00 AM
Description
Frequently Asked Questions
1
What is the vulnerability ID of this vulnerability?
The vulnerability ID is CVE-2018-17235.
2
What is the severity of CVE-2018-17235?
The severity of CVE-2018-17235 is medium, with a severity value of 6.5.
3
What software is affected by CVE-2018-17235?
The software affected by CVE-2018-17235 is libmp4v2 version 2.1.0.
4
How does CVE-2018-17235 impact the affected software?
CVE-2018-17235 causes a heap-based buffer over-read in libmp4v2 version 2.1.0, leading to denial of service.
5
Is there a fix available for CVE-2018-17235?
Yes, the fix for CVE-2018-17235 is available in the updated version of libmp4v2.