PatchTheCVEmp4v2 vulnerabilities and fixes
Recent CVEs affecting mp4v2, with upgrade or downgrade steps. 8 tracked.
mp4v2 has 8 tracked vulnerabilities, 0 critical. A fixed release or vendor patch exists for 0. Most recent: 2023-06-02. Highest priority: CVE-2023-29584 (score 50/100).
- CVE-2023-33720 MEDIUM 6.5 DOWNGRADE mp4v2 v2.1.2 was discovered to contain a memory leak via the class MP4BytesProperty.
- CVE-2023-33719 MEDIUM 5.5 DOWNGRADE mp4v2 v2.1.3 was discovered to contain a memory leak via MP4SdpAtom::Read() at atom_sdp.cpp
- CVE-2023-33717 MEDIUM 5.5 DOWNGRADE mp4v2 v2.1.3 was discovered to contain a memory leak when a method calling MP4File::ReadBytes() had allocated
- CVE-2023-33716 MEDIUM 5.5 DOWNGRADE mp4v2 v2.1.3 was discovered to contain a memory leak via the class MP4StringProperty at mp4property.cpp.
- CVE-2023-29584 HIGH 8.8 DOWNGRADE mp4v2 v2.0.0 was discovered to contain a heap buffer overflow via the MP4GetVideoProfileLevel function at /src
- CVE-2023-29578 HIGH 8.8 DOWNGRADE mp4v2 v2.0.0 was discovered to contain a heap buffer overflow via the mp4v2::impl::MP4StringProperty::~MP4Stri
- CVE-2023-1451 LOW 3.3 DOWNGRADE A vulnerability was found in MP4v2 2.1.2
- CVE-2023-1450 LOW 3.3 DOWNGRADE A vulnerability was found in MP4v2 2.1.2 and classified as problematic
FAQ
How do I fix mp4v2 vulnerabilities?
Open the CVE for your version, check the affected range, then follow the listed action: upgrade to the fixed release, or downgrade or mitigate if no fix exists yet. Commands for each OS are shown on every CVE page.
Is mp4v2 being exploited right now?
None of the tracked mp4v2 CVEs are on the CISA Known Exploited Vulnerabilities list at the moment. This is checked every 20 minutes.
Which mp4v2 CVE should I patch first?
CVE-2023-29584 currently ranks highest (50/100): mp4v2 v2.0.0 was discovered to contain a heap buffer overflow via the MP4GetVideoProfileLevel function at /src.