CVE-2018-14054: Techsmith MP4V2

Critical severity, CVSS 9.8. EPSS: 2.6% chance of exploitation in the next 30 days.

A double free exists in the MP4StringProperty class in mp4property.cpp in MP4v2 2.0.0. A dangling pointer is freed again in the destructor once an exception is triggered.

Affected products

• Techsmith MP4V2: version 2.0.0 only

Published 2018-07-13. Last modified 2026-06-17.