6.8
CVSSv2

CVE-2018-14325

Published: 16/07/2018 Updated: 07/11/2023
CVSS v2 Base Score: 6.8 | Impact Score: 6.4 | Exploitability Score: 8.6
CVSS v3 Base Score: 8.8 | Impact Score: 5.9 | Exploitability Score: 2.8
VMScore: 605
Vector: AV:N/AC:M/Au:N/C:P/I:P/A:P

Vulnerability Summary

In MP4v2 2.0.0, there is an integer underflow (with resultant memory corruption) when parsing MP4Atom in mp4atom.cpp.

Vulnerability Trend

Vulnerable Product Search on Vulmon Subscribe to Product

techsmith mp4v2 2.0.0

Vendor Advisories

Debian Bug report logs - #904901 mp4v2: CVE-2018-14325 Package: src:mp4v2; Maintainer for src:mp4v2 is Debian Multimedia Maintainers <pkg-multimedia-maintainers@listsaliothdebianorg>; Reported by: Salvatore Bonaccorso <carnil@debianorg> Date: Sun, 29 Jul 2018 10:27:09 UTC Severity: important Tags: security, upstr ...
In MP4v2 200, there is an integer underflow (with resultant memory corruption) when parsing MP4Atom in mp4atomcpp ...