Skip to content
OpenAdvisories
Medium · 5.5 CVE-2023-33717 EUVD-2023-37872GHSA-rg79-r2v5-rjw5

mp4v2 v2.1.3 was discovered to contain a memory leak when a method calling MP4File::ReadBytes() had allocated memory but did not catch exce…

Published Jun 2, 2023 · Updated Jan 8, 2025 · Assigned by mitre

Description

mp4v2 v2.1.3 was discovered to contain a memory leak when a method calling MP4File::ReadBytes() had allocated memory but did not catch exceptions thrown by ReadBytes()

Fixed in Linux distributions

Distributions backport fixes, so the version that fixes this vulnerability differs per release — upgrade to at least the version shown. From the distributions' security trackers and advisories.

ReleasePackageFixed inAdvisory
Ubuntu 18.04 LTS mp4v2 No fix yet —
Ubuntu 16.04 LTS mp4v2 No fix yet —

References