cve/2018/CVE-2018-17235.md
2024-06-09 00:33:16 +00:00

748 B

CVE-2018-17235

Description

The function mp4v2::impl::MP4Track::FinishSdtp() in mp4track.cpp in libmp4v2 2.1.0 mishandles compatibleBrand while processing a crafted mp4 file, which leads to a heap-based buffer over-read, causing denial of service.

POC

Reference

Github

No PoCs found on GitHub currently.