PatchTheCVEmp4v2 vulnerabilities
Recent CVEs affecting mp4v2 products. 2 tracked.
mp4v2 has 2 tracked vulnerabilities, 0 critical. A fixed release or vendor patch exists for 0. Most recent: 2023-06-01. Highest priority: CVE-2023-33719 (score 31/100).
- CVE-2023-33719 MEDIUM 5.5 DOWNGRADE mp4v2 v2.1.3 was discovered to contain a memory leak via MP4SdpAtom::Read() at atom_sdp.cpp
- CVE-2023-33716 MEDIUM 5.5 DOWNGRADE mp4v2 v2.1.3 was discovered to contain a memory leak via the class MP4StringProperty at mp4property.cpp.
FAQ
How do I fix mp4v2 vulnerabilities?
Open the CVE for your version, check the affected range, then follow the listed action: upgrade to the fixed release, or downgrade or mitigate if no fix exists yet. Commands for each OS are shown on every CVE page.
Is mp4v2 being exploited right now?
None of the tracked mp4v2 CVEs are on the CISA Known Exploited Vulnerabilities list at the moment. This is checked every 20 minutes.
Which mp4v2 CVE should I patch first?
CVE-2023-33719 currently ranks highest (31/100): mp4v2 v2.1.3 was discovered to contain a memory leak via MP4SdpAtom::Read() at atom_sdp.cpp.