CVE-2023-33719 - Vulnerability Details - OpenCVE

mp4v2 v2.1.3 was discovered to contain a memory leak via MP4SdpAtom::Read() at atom_sdp.cpp

No CVSS v4.0

Attack Vector Local

Attack Complexity Low

Privileges Required None

Scope Unchanged

Confidentiality Impact None

Integrity Impact None

Availability Impact High

User Interaction Required

No CVSS v3.0

No CVSS v2

This CVE is not in the KEV list.

Exploitation none

Automatable no

Technical Impact partial

Vendors	Products
Mp4v2	Mp4v2

Configuration 1 [-]

cpe:2.3:a:mp4v2:mp4v2:2.1.3:*:*:*:*:*:*:*

No data.

References

Link	Providers
https://github.com/enzo1982/mp4v2/
https://github.com/enzo1982/mp4v2/issues/37

History

Thu, 09 Jan 2025 18:15:00 +0000

Type	Values Removed	Values Added
Metrics		ssvc `{'options': {'Automatable': 'no', 'Exploitation': 'none', 'Technical Impact': 'partial'}, 'version': '2.0.3'}`

MITRE

Status: PUBLISHED

Assigner: mitre

Published: 2023-06-01T00:00:00

Updated: 2025-01-09T17:43:48.892Z

Reserved: 2023-05-22T00:00:00

Link: CVE-2023-33719

Vulnrichment

Updated: 2024-08-02T15:47:06.529Z

NVD

Status : Modified

Published: 2023-06-01T03:15:20.630

Modified: 2025-01-09T18:15:26.460

Link: CVE-2023-33719

Redhat

No data.

{"configurations": [{"nodes": [{"cpeMatch": [{"criteria": "cpe:2.3:a:mp4v2:mp4v2:2.1.3:*:*:*:*:*:*:*", "matchCriteriaId": "F5EA933F-A645-4970-9C1F-AE890537E1C5", "vulnerable": true}], "negate": false, "operator": "OR"}]}], "cveTags": [], "descriptions": [{"lang": "en", "value": "mp4v2 v2.1.3 was discovered to contain a memory leak via MP4SdpAtom::Read() at atom_sdp.cpp"}, {"lang": "es", "value": "Se ha descubierto que MP4v2 v2.1.3 contiene una fuga de memoria a trav\u00e9s de \"MP4SdpAtom::Read()\" en \"atom_sdp.cpp\"."}], "id": "CVE-2023-33719", "lastModified": "2025-01-09T18:15:26.460", "metrics": {"cvssMetricV31": [{"cvssData": {"attackComplexity": "LOW", "attackVector": "LOCAL", "availabilityImpact": "HIGH", "baseScore": 5.5, "baseSeverity": "MEDIUM", "confidentialityImpact": "NONE", "integrityImpact": "NONE", "privilegesRequired": "NONE", "scope": "UNCHANGED", "userInteraction": "REQUIRED", "vectorString": "CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H", "version": "3.1"}, "exploitabilityScore": 1.8, "impactScore": 3.6, "source": "nvd@nist.gov", "type": "Primary"}, {"cvssData": {"attackComplexity": "LOW", "attackVector": "LOCAL", "availabilityImpact": "HIGH", "baseScore": 5.5, "baseSeverity": "MEDIUM", "confidentialityImpact": "NONE", "integrityImpact": "NONE", "privilegesRequired": "NONE", "scope": "UNCHANGED", "userInteraction": "REQUIRED", "vectorString": "CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H", "version": "3.1"}, "exploitabilityScore": 1.8, "impactScore": 3.6, "source": "134c704f-9b21-4f2e-91b3-4a467353bcc0", "type": "Secondary"}]}, "published": "2023-06-01T03:15:20.630", "references": [{"source": "cve@mitre.org", "tags": ["Product"], "url": "https://github.com/enzo1982/mp4v2/"}, {"source": "cve@mitre.org", "tags": ["Exploit", "Vendor Advisory"], "url": "https://github.com/enzo1982/mp4v2/issues/37"}, {"source": "af854a3a-2127-422b-91ae-364da2661108", "tags": ["Product"], "url": "https://github.com/enzo1982/mp4v2/"}, {"source": "af854a3a-2127-422b-91ae-364da2661108", "tags": ["Exploit", "Vendor Advisory"], "url": "https://github.com/enzo1982/mp4v2/issues/37"}], "sourceIdentifier": "cve@mitre.org", "vulnStatus": "Modified", "weaknesses": [{"description": [{"lang": "en", "value": "CWE-401"}], "source": "nvd@nist.gov", "type": "Primary"}, {"description": [{"lang": "en", "value": "CWE-401"}], "source": "134c704f-9b21-4f2e-91b3-4a467353bcc0", "type": "Secondary"}]}