CVE-2023-1450

MP4v2 mp4trackdump.cpp DumpTrack denial of service

CVSS 3.3 LOWEPSS 0.4%CWE-404

Vexday Risk Score

8Low

SSVC decision (CISA)

Track

No exploitation signal → monitor

CVSS 3.3EPSS 0.4%KEV nãoPoC —Nuclei —Metasploit —Patch —

Lifecycle

17 Mar 2023Published on NVD

Recommendation: Monitor — no exploitation signal at the moment.

A vulnerability was found in MP4v2 2.1.2 and classified as problematic. This issue affects the function DumpTrack of the file mp4trackdump.cpp. The manipulation leads to denial of service. The attack needs to be approached locally. The exploit has been disclosed to the public and may be used. The associated identifier of this vulnerability is VDB-223295.

CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:L

Affected products

n/a · MP4v2

Want to know if your infrastructure is exposed to this?

Talk to TrueHacking →

References

https://github.com/10cksYiqiyinHangzhouTechnology/mp4v2_trackdump_poc https://github.com/10cksYiqiyinHangzhouTechnology/mp4v2_trackdump_poc/blob/main/id_000005%2Csig_08%2Csrc_000166%2B000357%2Ctime_3137250%2Cexecs_3545598%2Cop_splice%2Crep_16 https://vuldb.com/?ctiid.223295 https://vuldb.com/?id.223295