TI-2024-39138 CVE-2024-58397 · GHSA-rpfq-3w7q-qcrv
Heap out-of-bounds read in MP4v2 lets crafted MP4 files leak memory
Priority MEDIUM 64
MP4v2 through 2.1.3 contains a heap-based out-of-bounds read in MP4File::GetChapters() that allows attackers to read past heap allocations via crafted QuickTime chapter samples.