CVE-2018-17236: Use After Free
Published Sep 20, 2018
·Updated
The function MP4Free() in mp4property.cpp in libmp4v2 2.1.0 internally calls free() on a invalid pointer, raising a SIGABRT signal.
Affected Software
1 affected component
Mp4v2 Project Mp4v2=2.1.0
Event History
Sep 20, 2018
CVE Published
via MITRE·12:00 AM
Data Sourced
via MITRE·12:00 AM
Description
Frequently Asked Questions
1
What is the vulnerability ID for this issue?
The vulnerability ID for this issue is CVE-2018-17236.
2
What is the severity of CVE-2018-17236?
The severity of CVE-2018-17236 is medium with a score of 6.5.
3
What software is affected by CVE-2018-17236?
The software affected by CVE-2018-17236 is libmp4v2 version 2.1.0.
4
What is the Common Weakness Enumeration (CWE) ID for CVE-2018-17236?
The CWE ID for CVE-2018-17236 is CWE-416.
5
How can I fix the vulnerability in libmp4v2 version 2.1.0?
To fix the vulnerability, you should update libmp4v2 to a version that includes the necessary patch or fix.