CVE-2016-2399: Libquicktime

High severity, CVSS 7.8. EPSS: 7.2% chance of exploitation in the next 30 days.

Integer overflow in the quicktime_read_pascal function in libquicktime 1.2.4 and earlier allows remote attackers to cause a denial of service or possibly have other unspecified impact via a crafted hdlr MP4 atom.

Affected products

• Libquicktime Libquicktime: up to and including 1.2.4

Published 2017-01-30. Last modified 2026-06-17.