mp4v2 v2.1.3 was discovered to contain a memory leak via MP4File::ReadString() at mp4fileio.cpp

The MP4Atom class in mp4atom.cpp in MP4v2 through 2.0.0 mishandles Entry Number validation for the MP4 Table Property, which allows remote attackers to cause a denial of service (overflow, insufficient memory allocation, and segmentation fault) or possibly have unspecified other impact via a crafted mp4 file.

mp4v2 v2.1.2 was discovered to contain a memory leak via the class MP4BytesProperty.

mp4v2 v2.1.3 was discovered to contain a memory leak when a method calling MP4File::ReadBytes() had allocated memory but did not catch exceptions thrown by ReadBytes()