mp4v2 v2.1.3 vulnerabilities

An issue in mp4v2 2.0.0 allows an attacker to execute arbitrary code via the MP4RtpAtom::ReadHntiType() in src/atom_rtp.cpp. A specially crafted MP4 file can cause an undersized rtp atom to produce a near-2^64 allocation size through an unchecked offset subtraction

mp4v2 2.0.0 contains a NULL pointer dereference vulnerability in MP4File::GenerateTracks() in src/mp4file.cpp. This allows a remote attacker to cause a denial of service

mp4v2 v2.1.3 was discovered to contain a memory leak when a method calling MP4File::ReadBytes() had allocated memory but did not catch exceptions thrown by ReadBytes().

Version 2.1.3 of the mp4v2 library was found to contain a memory leak in the MP4SdpAtom::Read() function in atom_sdp.cpp.

Version 2.1.3 of the mp4v2 library was found to contain a memory leak in the MP4StringProperty class in mp4property.cpp.

Version 2.1.3 of the mp4v2 library was found to contain a memory leak in the MP4File::ReadString() function in mp4file_io.cpp.

Version 2.1.2 of the mp4v2 library was discovered to contain a memory leak in the MP4BytesProperty class.