Threats tagged 'ghsa-q7pj-x362-2v3p'

L-SMASH versions through 2.14.5 have a heap out-of-bounds write vulnerability in the isom_read_hdlr() and isom_read_dref_entry() functions. This flaw is triggered by crafted MP4 or MOV files that declare handler (hdlr) or URL box sizes larger than the actual remaining data, causing heap corruption and application crashes.