CVE-2018-14403

· N/AModified

← All CVEs

CVSS v3.1

N/A

EPSS

2.60%

Published

Jul 19, 2018

Modified

Nov 21, 2024

Public PoC / Exploit (1)

All weaponized →

TrickestTrickest PoC index

Links to public security research (Exploit-DB, Nuclei, Trickest, GitHub) for defensive use only.

Description

MP4NameFirstMatches in mp4util.cpp in MP4v2 2.0.0 mishandles substrings of atom names, leading to use of an inappropriate data type for associated atoms. The resulting type confusion can cause out-of-bounds memory access.

Weaknesses (CWE)

CWE-704

Affected Products (1)

techsmith · mp4v2vulnerable

References (10)

http://www.openwall.com/lists/oss-security/2018/07/18/3

ExploitMailing ListThird Party Advisory

https://github.com/enzo1982/mp4v2/releases/tag/v2.1.0

https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/6YCHVOYPIBGM5HYUMQ77KZH2IHSITKVE/

https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/FRSO2IMK6P7MOIZWGWKONPIEHKBA7WL3/

https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/GISUIWPKBWPXORUFNWBGFTKQS7UUVUC4/

http://www.openwall.com/lists/oss-security/2018/07/18/3

KEV Catalog EPSS Scores Vendors All CVEs