CVE-2023-33719

Summary

CVE-2023-33719 is a newly disclosed vulnerability affecting version 2.1.3 of the mp4v2 library. This issue arises from a memory leak in the MP4SdpAtom::Read() function located in atom_sdp.cpp. An attacker could potentially exploit this vulnerability by crafting a malicious MP4 SDP atom that triggers the memory leak, resulting in denial-of-service conditions or, in some cases, arbitrary code execution. This could lead to significant security risks for applications that utilize the vulnerable library. It is highly recommended that users upgrade to a patched version of the library as soon as possible to mitigate these risks.

Prevent cyber attacks with Recorded Future by prioritizing and patching critical vulnerabilities being exploited by threat actors targeting your industry. Book your demo to learn more.