CVE-2023-1451: MP4v2 mp4track.cpp GetSampleFileOffset denial of service
A vulnerability was found in MP4v2 2.1.2. It has been classified as problematic. Affected is the function mp4v2::impl::MP4Track::GetSampleFileOffset of the file mp4track.cpp. The manipulation leads to denial of service. An attack has to be approached locally. The exploit has been disclosed to the public and may be used. The identifier of this vulnerability is VDB-223296.
Affected Software
Event History
Frequently Asked Questions
What is the severity of CVE-2023-1451?
The severity of CVE-2023-1451 is medium.
How does CVE-2023-1451 affect MP4v2?
CVE-2023-1451 affects MP4v2 by exploiting the mp4v2::impl::MP4Track::GetSampleFileOffset function in the mp4track.cpp file, leading to denial of service.
How can I fix CVE-2023-1451?
To fix CVE-2023-1451, it is recommended to upgrade to a version of MP4v2 that is not affected by this vulnerability.
What is the Common Weakness Enumeration (CWE) ID for CVE-2023-1451?
The Common Weakness Enumeration (CWE) ID for CVE-2023-1451 is 404.
Where can I find more information about CVE-2023-1451?
More information about CVE-2023-1451 can be found at the following references: - [VulDB ID 223296](https://vuldb.com/?id.223296) - [VulDB CTIID 223296](https://vuldb.com/?ctiid.223296) - [GitHub Repository with PoC](https://github.com/RichTrouble/mp4v2_mp4track_poc)