CVE-2024-58397: MP4v2 through 2.1.3 Heap Out-of-Bounds Read via MP4File::GetChapters
MP4v2 through 2.1.3 contains a heap-based out-of-bounds read in MP4File::GetChapters() that allows attackers to read past heap allocations via crafted QuickTime chapter samples. Attackers can supply an MP4 file whose chapter sample is shorter than its declared title length, crashing applications like mp4chaps or leaking adjacent heap memory into chapter titles.
Affected Software
Event History
Frequently Asked Questions
Which applications are exposed to this issue?
Applications that use MP4v2 through 2.1.3 and call MP4File::GetChapters() when processing an attacker-supplied MP4 file are exposed. The described impact specifically includes applications such as mp4chaps.
What must an attacker provide to trigger the flaw?
The attacker must supply a crafted MP4 file containing a QuickTime chapter sample that is shorter than the title length declared in that sample. User interaction is required to cause the application to process the malicious file.
What are the likely effects of successful exploitation?
Processing the crafted chapter data can cause an application crash. It may also disclose adjacent heap memory through returned or displayed chapter titles.