CVE-2018-7339: MP4V2 Project MP4V2

High severity, CVSS 8.8. EPSS: 1.4% chance of exploitation in the next 30 days.

The MP4Atom class in mp4atom.cpp in MP4v2 through 2.0.0 mishandles Entry Number validation for the MP4 Table Property, which allows remote attackers to cause a denial of service (overflow, insufficient memory allocation, and segmentation fault) or possibly have unspecified other impact via a crafted mp4 file.

Affected products

• MP4V2 Project MP4V2: up to and including 2.0.0

Published 2018-02-23. Last modified 2026-06-17.