CVE-2023-33717: Medium severity Mp4v2 Project Mp4v2 vulnerability
mp4v2 v2.1.3 was discovered to contain a memory leak when a method calling MP4File::ReadBytes() had allocated memory but did not catch exceptions thrown by ReadBytes()
Affected Software
Event History
Frequently Asked Questions
What is CVE-2023-33717?
CVE-2023-33717 is a vulnerability discovered in mp4v2 v2.1.3 which causes a memory leak when a method calling MP4File::ReadBytes() fails to catch exceptions.
How severe is CVE-2023-33717?
CVE-2023-33717 has a severity rating of 5.5, which is classified as medium.
What software is affected by CVE-2023-33717?
The affected software is mp4v2 v2.1.3.
How can I fix CVE-2023-33717?
There is currently no known fix for CVE-2023-33717. It is recommended to update to a version of mp4v2 that is not affected by the vulnerability when it becomes available.
Where can I find more information about CVE-2023-33717?
More information about CVE-2023-33717 can be found at the following references: [link1](https://github.com/enzo1982/mp4v2/) and [link2](https://github.com/enzo1982/mp4v2/issues/37).