Threats tagged 'ghsa-3r23-64c4-mj87'

A vulnerability in the ngx_http_mp4_module of NGINX Open Source and NGINX Plus can cause an over-read of worker memory leading to termination of the NGINX worker process. This issue occurs only if NGINX is built with the ngx_http_mp4_module and the mp4 directive is enabled in the configuration. Exploitation requires an attacker to trigger processing of a specially crafted MP4 file. Versions that have reached End of Technical Support are not evaluated.