Description
MP4Parser does not adequately validate MP4 box sizes. A malformed box can cause parsing to make no forward progress and repeatedly process the same input.
Affected products
| Vendor | Product | Affected | Fixed |
|---|---|---|---|
| J4Care | dcm4chee-arc-light | 5.35.1 | 5.35.2 |
Advisories 1
- ICSMA-26-288-02 J4Care dcm4che CISA ICS & IT advisories · Oct 15, 2026