CVE-2018-7339 - CVE House
Back to Database
Status published High CVE-2018-7339

The MP4Atom class in mp4atom.cpp in MP4v2 through 2.0.0 mishandles...

Vulnerability Description

The MP4Atom class in mp4atom.cpp in MP4v2 through 2.0.0 mishandles Entry Number validation for the MP4 Table Property, which allows remote attackers to cause a denial of service (overflow, insufficient memory allocation, and segmentation fault) or possibly have unspecified other impact via a crafted mp4 file.

Impact Analysis

Refer to official advisory for detailed impact metrics.

Remediation

Ensure systems are updated to the latest vendor-supplied patch levels.

THREAT MONITOR

Am I Vulnerable?

Launch our assessment wizard to check if your infrastructure is exposed to • CVE-2018-7339

Credits & Attribution

No credits recorded in the NVD database.

References

More from mp4v2 project

View All →
CVE-2018-17236
The function MP4Free() in mp4property.cpp in libmp4v2 2.1.0 internally calls...
Medium 6.5
CVE-2018-17235
The function mp4v2::impl::MP4Track::FinishSdtp() in mp4track.cpp in libmp4v2 2.1.0 mishandles compatibleBrand...
Medium 6.5

Affected Vendor

mp4v2 project

View all reports →

Affected Software

mp4v2
Vulnerable Versions:
0

Timeline

Official Publish: February 23rd, 2018
Last Modified: August 5th, 2024
Added to House: July 20th, 2026

CVSS Vectors

V3: CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H

Weaknesses (CWE)

No CWE data available

MITRE ATT&CK TTPs

No associated TTPs found for this vulnerability.