CVE-2023-33717

MediumCVSS 5.5

Published: 02/06/2023(UTC)Updated: 17/06/2026(UTC)Translated: 19/06/2026(UTC)NVD NIST

Exploitation Probability (EPSS)

Low risk

0.28%

20th percentile - higher than 20% of all known CVEs

Summary

mp4v2 v2.1.3 was discovered to contain a memory leak when a method calling MP4File::ReadBytes() had allocated memory but did not catch exceptions thrown by ReadBytes().

Risk Assessment

The memory leak may lead to increased resource consumption, which can affect application stability and system performance in the long run.

Recommendation

It is recommended to update to a newer version of mp4v2 that fixes this issue and to review the code to ensure proper exception handling.

Original NVD description (English source)

mp4v2 v2.1.3 was discovered to contain a memory leak when a method calling MP4File::ReadBytes() had allocated memory but did not catch exceptions thrown by ReadBytes()