CVE-2018-7339: Buffer Overflow
The MP4Atom class in mp4atom.cpp in MP4v2 through 2.0.0 mishandles Entry Number validation for the MP4 Table Property, which allows remote attackers to cause a denial of service (overflow, insufficient memory allocation, and segmentation fault) or possibly have unspecified other impact via a crafted mp4 file.
Affected Software
Event History
Frequently Asked Questions
What is the vulnerability ID for this issue?
The vulnerability ID for this issue is CVE-2018-7339.
What is the severity of CVE-2018-7339?
The severity of CVE-2018-7339 is rated as high with a severity value of 8.8.
What software is affected by CVE-2018-7339?
The Mp4v2 Project Mp4v2 software up to and including version 2.0.0 is affected by CVE-2018-7339.
What is the impact of CVE-2018-7339?
CVE-2018-7339 can lead to a denial of service (overflow, insufficient memory allocation, and segmentation fault) or possibly have unspecified other impact.
Is there any fix available for CVE-2018-7339?
At the time of writing, there is no specific fix available for CVE-2018-7339. It is recommended to update to a version of Mp4v2 that is not affected by this vulnerability.