mp4v2 v2.1.3 was discovered to contain a memory leak via MP4File::ReadString() at mp4fileio.cpp

mp4v2 v2.1.2 was discovered to contain a memory leak via the class MP4BytesProperty.

mp4v2 v2.1.3 was discovered to contain a memory leak when a method calling MP4File::ReadBytes() had allocated memory but did not catch exceptions thrown by ReadBytes()

The MP4Atom class in mp4atom.cpp in MP4v2 through 2.0.0 mishandles Entry Number validation for the MP4 Table Property, which allows remote attackers to cause a denial of service (overflow, insufficient memory allocation, and segmentation fault) or possibly have unspecified other impact via a crafted mp4 file.