CVE-2023-29578: Buffer Overflow

Published Apr 24, 2023

Updated

mp4v2 v2.0.0 was discovered to contain a heap buffer overflow via the mp4v2::impl::MP4StringProperty::~MP4StringProperty() function at src/mp4property.cpp.

Affected Software

1 affected component

Mp4v2 Project Mp4v2=2.0.0

Event History

Apr 24, 2023

CVE Published

via MITRE·12:00 AM

Data Sourced

via MITRE·12:00 AM

Description

Frequently Asked Questions

What is CVE-2023-29578?

CVE-2023-29578 is a vulnerability found in mp4v2 v2.0.0 that allows for a heap buffer overflow through the mp4v2::impl::MP4StringProperty::~MP4StringProperty() function.

What is the severity of CVE-2023-29578?

The severity of CVE-2023-29578 is rated as high with a score of 8.8.

How does CVE-2023-29578 impact the affected software?

CVE-2023-29578 can lead to a heap buffer overflow in the mp4v2 v2.0.0 software.

Is there a fix available for CVE-2023-29578?

At the moment, there is no known fix available for CVE-2023-29578. It is recommended to follow the provided references for any updates or patches.

What are the Common Weakness Enumeration (CWE) IDs associated with CVE-2023-29578?

CVE-2023-29578 is associated with CWE-119 (Improper Restriction of Operations within the Bounds of a Memory Buffer) and CWE-787 (Out-of-bounds Write).