mp4v2 2.1.3 atom_sdp.cpp MP4SdpAtom::Read memory leak

Summaryinfo

A vulnerability classified as problematic has been found in mp4v2 2.1.3. Affected by this vulnerability is the function MP4SdpAtom::Read of the file atom_sdp.cpp. Performing a manipulation results in memory leak. This vulnerability is cataloged as CVE-2023-33719. There is no exploit available.

Detailsinfo

A vulnerability, which was classified as problematic, was found in mp4v2 2.1.3. This affects the function MP4SdpAtom::Read of the file atom_sdp.cpp. The manipulation with an unknown input leads to a memory leak vulnerability. CWE is classifying the issue as CWE-401. The product does not sufficiently track and release allocated memory after it has been used, which slowly consumes remaining memory. This is going to have an impact on availability. The summary by CVE is:

mp4v2 v2.1.3 was discovered to contain a memory leak via MP4SdpAtom::Read() at atom_sdp.cpp

The weakness was shared 06/01/2023 as 37. It is possible to read the advisory at github.com. This vulnerability is uniquely identified as CVE-2023-33719 since 05/22/2023. Technical details of the vulnerability are known, but there is no available exploit.

There is no information about possible countermeasures known. It may be suggested to replace the affected object with an alternative product.

The vulnerability is also documented in the vulnerability database at EUVD (EUVD-2023-37874). Be aware that VulDB is the high quality source for vulnerability data.

Productinfo

Name

• mp4v2

Version

• 2.1.3

CPE 2.3info

• 🔍

CPE 2.2info

• 🔍

CVSSv4info

CVSSv3info

CVSSv2info

Exploitinginfo

Threat Intelligenceinfo

Countermeasuresinfo

Timelineinfo

Sourcesinfo

Entryinfo

Be aware that VulDB is the high quality source for vulnerability data.

Discussion