mp4v2 vulnerabilities

CVEs whose affected-version data names the mp4v2 package. Each record lists the affected and patched versions; check a specific version with the dependency checker or POST /api/sbom.

1 CVERSS

CVE-2024-58397Medium· 6.1

yesterday

MP4v2 through 2.1.3 Heap Out-of-Bounds Read via MP4File::GetChapters

MP4v2 through 2.1.3 contains a heap-based out-of-bounds read in MP4File::GetChapters() that allows attackers to read past heap allocations via crafted QuickTime chapter samples. Attackers can supply an MP4 file whose chapter sample is sh…

▾ Sunlitenzo1982 · mp4v2via CVEORG