CVE-2024-58397 Details

A heap-based out-of-bounds read vulnerability has been identified in the MP4v2 library, specifically in versions through 2.1.3. The issue arises in the `MP4File::GetChapters()` function while processing QuickTime chapter samples. Attackers can exploit this vulnerability by crafting an MP4 file with a chapter sample that has a declared title length exceeding the actual sample size. This exploitation leads to a read operation that extends beyond the allocated heap memory, causing applications to crash or to leak adjacent heap data into the chapter titles.

To address this vulnerability, the `MP4File::GetChapters()` function should be modified to include proper checks on the chapter sample length before processing. Specifically, the title length should be clamped to the actual size of the sample, and samples that are too short to contain the required length prefix should be handled appropriately.