exploitDog

CVE-2023-29584

Опубликовано: 14 апр. 2023

Источник: nvd

CVSS3: 8.8

EPSS Низкий

Описание

mp4v2 v2.0.0 was discovered to contain a heap buffer overflow via the MP4GetVideoProfileLevel function at /src/mp4.cpp.

Ссылки

https://github.com/enzo1982/mp4v2/issues/30
Exploit
Issue Tracking
Third Party Advisory
https://github.com/z1r00/fuzz_vuln/blob/main/mp4v2/heap-buffer-overflow/MP4GetVideoProfileLevel/readme.md
Exploit
Third Party Advisory
https://github.com/enzo1982/mp4v2/issues/30
Exploit
Issue Tracking
Third Party Advisory
https://github.com/z1r00/fuzz_vuln/blob/main/mp4v2/heap-buffer-overflow/MP4GetVideoProfileLevel/readme.md
Exploit
Third Party Advisory

Уязвимые конфигурации

Конфигурация 1

cpe:2.3:a:mp4v2_project:mp4v2:2.0.0:*:*:*:*:*:*:*

EPSS

Процентиль: 42%

0.00197

Низкий

8.8 High

CVSS3

Дефекты

CWE-787

CWE-787

Связанные уязвимости

CVE-2023-29584

CVSS3: 8.8

ubuntu

почти 3 года назад

mp4v2 v2.0.0 was discovered to contain a heap buffer overflow via the MP4GetVideoProfileLevel function at /src/mp4.cpp.

CVE-2023-29584

CVSS3: 8.8

debian

почти 3 года назад

mp4v2 v2.0.0 was discovered to contain a heap buffer overflow via the ...

GHSA-f3mv-2fjw-2j34

CVSS3: 8.8

github

почти 3 года назад

mp4v2 v2.0.0 was discovered to contain a heap buffer overflow via the MP4GetVideoProfileLevel function at /src/mp4.cpp.

EPSS

Процентиль: 42%

0.00197

Низкий

8.8 High

CVSS3

Дефекты

CWE-787

CWE-787