CVE-2018-14325
CVE-2018-14325
This page contains facts from public vulnerability sources. Check the original advisory before updating.
In MP4v2 2.0.0, there is an integer underflow (with resultant memory corruption) when parsing MP4Atom in mp4atom.cpp.
CVSS 8.8 · High · EPSS 2.0%
- Published
- Updated
Stack: system
Affected products and versions
Original sources
- http://www.openwall.com/lists/oss-security/2018/07/16/1
- https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/6YCHVOYPIBGM5HYUMQ77KZH2IHSITKVE/
- https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/FRSO2IMK6P7MOIZWGWKONPIEHKBA7WL3/
- https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/GISUIWPKBWPXORUFNWBGFTKQS7UUVUC4/
- https://github.com/enzo1982/mp4v2/releases/tag/v2.1.0
- https://nvd.nist.gov/vuln/detail/CVE-2018-14325