PatchTheCVEmp4v2 project vulnerabilities
Recent CVEs affecting mp4v2 project products. 6 tracked.
mp4v2 project has 6 tracked vulnerabilities, 0 critical. A fixed release or vendor patch exists for 0. Most recent: 2023-06-02. Highest priority: CVE-2023-29584 (score 50/100).
- CVE-2023-33720 MEDIUM 6.5 DOWNGRADE mp4v2 v2.1.2 was discovered to contain a memory leak via the class MP4BytesProperty.
- CVE-2023-33717 MEDIUM 5.5 DOWNGRADE mp4v2 v2.1.3 was discovered to contain a memory leak when a method calling MP4File::ReadBytes() had allocated
- CVE-2023-29584 HIGH 8.8 DOWNGRADE mp4v2 v2.0.0 was discovered to contain a heap buffer overflow via the MP4GetVideoProfileLevel function at /src
- CVE-2023-29578 HIGH 8.8 DOWNGRADE mp4v2 v2.0.0 was discovered to contain a heap buffer overflow via the mp4v2::impl::MP4StringProperty::~MP4Stri
- CVE-2023-1451 LOW 3.3 DOWNGRADE A vulnerability was found in MP4v2 2.1.2
- CVE-2023-1450 LOW 3.3 DOWNGRADE A vulnerability was found in MP4v2 2.1.2 and classified as problematic
FAQ
How do I fix mp4v2 project vulnerabilities?
Open the CVE for your version, check the affected range, then follow the listed action: upgrade to the fixed release, or downgrade or mitigate if no fix exists yet. Commands for each OS are shown on every CVE page.
Is mp4v2 project being exploited right now?
None of the tracked mp4v2 project CVEs are on the CISA Known Exploited Vulnerabilities list at the moment. This is checked every 20 minutes.
Which mp4v2 project CVE should I patch first?
CVE-2023-29584 currently ranks highest (50/100): mp4v2 v2.0.0 was discovered to contain a heap buffer overflow via the MP4GetVideoProfileLevel function at /src.