MEDIUM
enzo1982
CVE published 2026-10-15
CVE-2024-58397
A heap-based out-of-bounds read vulnerability exists in MP4v2 through 2.1.3 in the MP4File::GetChapters() function. This allows attackers to read past heap allocations via crafted QuickTime chapter samples, potentially crashing applications or leaking adjacent heap memory into chapter titles. The vulnerability is triggered when an MP4 file with a chapter sample shorter than its declared title length is pr [truncated]