CVE-2023-33717
MediumCVSS 5.5Exploitation Probability (EPSS)
Low risk20th percentile - higher than 20% of all known CVEs
Summary
mp4v2 v2.1.3 was discovered to contain a memory leak when a method calling MP4File::ReadBytes() had allocated memory but did not catch exceptions thrown by ReadBytes().
Risk Assessment
The memory leak may lead to increased resource consumption, which can affect application stability and system performance in the long run.
Recommendation
It is recommended to update to a newer version of mp4v2 that fixes this issue and to review the code to ensure proper exception handling.
Other vulnerabilities in mp4v2 v2.1.3
See all- CVE-2023-33719Medium
Version 2.1.3 of the mp4v2 library was found to contain a memory leak in the MP4SdpAtom::Read() function in atom_sdp.cpp.
- CVE-2023-33716Medium
Version 2.1.3 of the mp4v2 library was found to contain a memory leak in the MP4StringProperty class in mp4property.cpp.
- CVE-2023-33718High
Version 2.1.3 of the mp4v2 library was found to contain a memory leak in the MP4File::ReadString() function in mp4file_io.cpp.
- CVE-2023-33720Medium
Version 2.1.2 of the mp4v2 library was discovered to contain a memory leak in the MP4BytesProperty class.
Original NVD description (English source)
mp4v2 v2.1.3 was discovered to contain a memory leak when a method calling MP4File::ReadBytes() had allocated memory but did not catch exceptions thrown by ReadBytes()
Vulnerability data from NVD (NIST) · CISA KEV · EPSS