Vulnerability Information
Although we use advanced large model technology, its output may still contain inaccurate or outdated information.Shenlong tries to ensure data accuracy, but please verify and judge based on the actual situation.
Vulnerability Title
N/A
Vulnerability Description
The function mp4v2::impl::MP4Track::FinishSdtp() in mp4track.cpp in libmp4v2 2.1.0 mishandles compatibleBrand while processing a crafted mp4 file, which leads to a heap-based buffer over-read, causing denial of service.
CVSS Information
N/A
Vulnerability Type
N/A
Vulnerability Title
libmp4v2 缓冲区错误漏洞
Vulnerability Description
libmp4v2是一个使用C++语言编写的用于处理mp4容器的开源库。 libmp4v2 2.1.0版本中的mp4track.cpp文件的‘mp4v2::impl::MP4Track::FinishSdtp()’函数存在堆溢出漏洞，该漏洞源于程序没有正确的处理compatibleBrand。攻击者可借助特制的mp4文件利用该漏洞造成拒绝服务（基于堆的缓冲区越界读取）。
CVSS Information
N/A
Vulnerability Type
N/A