CVE-2023-1451lowCWE-404

MP4v2 mp4track.cpp GetSampleFileOffset denial of service

8Vexday Risk Score

Sin señal de explotación. Ningún artefacto público de explotación conocido hasta ahora.

ssvc Trackcvss 3.3epss 0.4%

probabilidad de explotación

0.4%top 69% de las CVE

explotación observada

noninguna fuente lo reporta

A vulnerability was found in MP4v2 2.1.2. It has been classified as problematic. Affected is the function mp4v2::impl::MP4Track::GetSampleFileOffset of the file mp4track.cpp. The manipulation leads to denial of service. An attack has to be approached locally. The exploit has been disclosed to the public and may be used. The identifier of this vulnerability is VDB-223296.

CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:L

Productos afectados

n/a · MP4v2

Referencias

https://github.com/RichTrouble/mp4v2_mp4track_poc https://github.com/RichTrouble/mp4v2_mp4track_poc/blob/main/id_000000%2Csig_08%2Csrc_001076%2Ctime_147809374%2Cexecs_155756872%2Cop_havoc%2Crep_8 https://vuldb.com/?ctiid.223296 https://vuldb.com/?id.223296