CVE-2023-1450: MP4v2 mp4trackdump.cpp DumpTrack denial of service

Published Mar 17, 2023

Updated

A vulnerability was found in MP4v2 2.1.2 and classified as problematic. This issue affects the function DumpTrack of the file mp4trackdump.cpp. The manipulation leads to denial of service. The attack needs to be approached locally. The exploit has been disclosed to the public and may be used. The associated identifier of this vulnerability is VDB-223295.

Affected Software

1 affected component

Mp4v2 Project Mp4v2=2.1.2

Event History

Mar 17, 2023

CVE Published

06:47 AM

Data Sourced

06:47 AM

DescriptionSeverityWeakness

Data Sourced

via NVD·07:15 AM

DescriptionSeverityWeaknessAffected Software

Frequently Asked Questions

What is the vulnerability ID for this issue?

The vulnerability ID for this issue is CVE-2023-1450.

What is the severity of CVE-2023-1450?

The severity of CVE-2023-1450 is medium with a severity value of 5.5.

What is the affected software?

The affected software is Mp4v2 2.1.2.

How does CVE-2023-1450 affect the software?

CVE-2023-1450 affects the DumpTrack function of mp4trackdump.cpp, leading to a denial of service.

How can CVE-2023-1450 be exploited?

CVE-2023-1450 can be exploited locally.

Is there a fix available for CVE-2023-1450?

There is no information provided about an available fix for CVE-2023-1450.

Are there any known exploits for CVE-2023-1450?

Yes, the exploit for CVE-2023-1450 has been disclosed to the public and may be used.

What is the CWE ID for CVE-2023-1450?

The CWE ID for CVE-2023-1450 is 404.