CVE-2018-14403 MP4NameFirstMatches in mp4util.cpp in MP4v2 2.0.0 mishandles substrings of atom names, leading to use of an inappropriate data type for associated atoms. The resulting type confusion can cause out-of-...
CriticalCVSS 9.8
EPSS 2.9%
- Published
- Updated
- Exploit status
- No public exploit known
Description
MP4NameFirstMatches in mp4util.cpp in MP4v2 2.0.0 mishandles substrings of atom names, leading to use of an inappropriate data type for associated atoms. The resulting type confusion can cause out-of-bounds memory access.
Affected products
| Product | Affected versions | Fixed in |
|---|---|---|
| techsmith mp4v2 | = 2.0.0 | No fix listed |
References
- www.openwall.com exploit mailing-list third-party-advisory
- github.com
- FEDORA-2019-d53d4a79ac vendor-advisory
- FEDORA-2019-1030f4816a vendor-advisory
- FEDORA-2019-6469ad8129 vendor-advisory