CVE-2018-14054

Source
Severity Low
Remote No
Type Denial of service
Description
A double free exists in the MP4StringProperty class in mp4property.cpp in MP4v2 2.0.0. A dangling pointer is freed again in the destructor once an exception is triggered.
Group Package Affected Fixed Severity Status Ticket
AVG-848 libmp4v2 2.0.0-5 Low Vulnerable
References
https://bugzilla.redhat.com/show_bug.cgi?id=1603294
https://www.openwall.com/lists/oss-security/2018/07/13/1