CVE-2023-29584: Buffer Overflow

Published Apr 14, 2023

Updated

mp4v2 v2.0.0 was discovered to contain a heap buffer overflow via the MP4GetVideoProfileLevel function at /src/mp4.cpp.

Affected Software

1 affected component

Mp4v2 Project Mp4v2=2.0.0

Event History

Apr 14, 2023

CVE Published

via MITRE·12:00 AM

Data Sourced

via MITRE·12:00 AM

Description

Data Sourced

via NVD·12:15 PM

DescriptionSeverityWeaknessAffected Software

Frequently Asked Questions

What is CVE-2023-29584?

CVE-2023-29584 is a vulnerability discovered in the mp4v2 library version 2.0.0, which allows a heap buffer overflow through the MP4GetVideoProfileLevel function.

How severe is CVE-2023-29584?

CVE-2023-29584 has a severity rating of 8.8 (high).

What software versions are affected by CVE-2023-29584?

CVE-2023-29584 affects mp4v2 version 2.0.0.

What is the Common Weakness Enumeration (CWE) ID for CVE-2023-29584?

The CWE ID for CVE-2023-29584 is CWE-119 (Improper Restriction of Operations within the Bounds of a Memory Buffer) and CWE-787 (Out-of-bounds Write).

Are there any references available for CVE-2023-29584?

Yes, you can find more information about CVE-2023-29584 at the following references: [Link 1](https://github.com/enzo1982/mp4v2/issues/30), [Link 2](https://github.com/z1r00/fuzz_vuln/blob/main/mp4v2/heap-buffer-overflow/MP4GetVideoProfileLevel/readme.md).