CVE-2024-58397Published
MP4v2 through 2.1.3 Heap Out-of-Bounds Read via MP4File::GetChapters
Explicit identifiers and source references
These records connect through source-stated identifiers. Shared identifiers or dates alone do not establish shared exposure, root cause or applicability.
CVE-2024-58397 · Microsoft / collected KEV context
cve-program · CVE-2024-58397
- https://hackmd.io/@haind-pwn/mp4v2-getchapters-oob-read
- https://github.com/enzo1982/mp4v2/issues/53
- https://github.com/enzo1982/mp4v2/blob/f4c2f1b87446100728472d80fd1161d2f8e830b2/src/mp4file.cpp#L2618-L2627
- https://github.com/enzo1982/mp4v2
- https://www.vulncheck.com/advisories/mp4v2-through-2.1.3-heap-out-of-bounds-read-via-mp4file-getchapters
Related operational evidence
Explicit CVE identifiersNo related operational record is retained in the current change model.