Techsmith's vulnerability profile centers on a compact set of screen-capture, video, and media-handling products including Snagit, Camtasia Studio, Camtasia Relay, and the MP4V2 library, serving both individual creators and organizations in content production and documentation workflows. The vendor's disclosures skew toward serious outcomes with an elevated share reaching critical severity and frequently acquire public exploit code; the recurring weakness classes—cross-site scripting, privilege-management flaws, type-confusion conditions, and memory-safety issues such as double-free—reflect the dual attack surface of web-facing collaboration features and native media-processing components. Defenders should prioritize this vendor's updates for internet-exposed instances and integrated media pipelines; live severity and exploitation counts are shown alongside this summary.
The number and severity of CVEs published that impact products developed by Techsmith over time
Signals from CVEs in this vendor scope (14 CVEs).
14 CVEs · Highest risk first
| CVE | Published | CVSS | Risk | KEV | Exploit |
|---|---|---|---|---|---|
CVE-2010-3130HIGH Untrusted search path vulnerability in TechSmith Snagit all versions 10.x and 11.x allows local users, and possibly remote attackers, to execute arbitrary code and conduct DLL hija | Aug 26, 2010 | 9.3 | 40 | NO | YES |
CVE-2018-14403CRITICAL MP4NameFirstMatches in mp4util.cpp in MP4v2 2.0.0 mishandles substrings of atom names, leading to use of an inappropriate data type for associated atoms. The resulting type confusi | Jul 19, 2018 | 9.8 | 30 | NO | NO |
CVE-2018-14054CRITICAL A double free exists in the MP4StringProperty class in mp4property.cpp in MP4v2 2.0.0. A dangling pointer is freed again in the destructor once an exception is triggered. | Jul 13, 2018 | 9.8 | 30 | NO | NO |
CVE-2020-18171HIGH TechSmith Snagit 19.1.0.2653 uses Object Linking and Embedding (OLE) which can allow attackers to obfuscate and embed crafted files used to escalate privileges. NOTE: This implies | Jul 26, 2021 | 8.8 | 27 | NO | NO |
CVE-2018-14379HIGH MP4Atom::factory in mp4atom.cpp in MP4v2 2.0.0 incorrectly uses the MP4ItemAtom data type in a certain case where MP4DataAtom is required, which allows remote attackers to cause a | Jul 18, 2018 | 8.8 | 27 | NO | NO |
CVE-2018-14326HIGH In MP4v2 2.0.0, there is an integer overflow (with resultant memory corruption) when resizing MP4Array for the ftyp atom in mp4array.h. | Jul 16, 2018 | 8.8 | 27 | NO | NO |
CVE-2018-14325HIGH In MP4v2 2.0.0, there is an integer underflow (with resultant memory corruption) when parsing MP4Atom in mp4atom.cpp. | Jul 16, 2018 | 8.8 | 27 | NO | NO |
CVE-2019-13382HIGH UploaderService in SnagIT 2019.1.2 allows elevation of privilege by placing an invalid presentation file in %PROGRAMDATA%\TechSmith\TechSmith Recorder\QueuedPresentations and then | Jul 26, 2019 | 7.8 | 26 | NO | NO |
CVE-2018-14446HIGH MP4Integer32Property::Read in atom_avcC.cpp in MP4v2 2.1.0 allows remote attackers to cause a denial of service (heap-based buffer overflow and application crash) or possibly have | Jul 20, 2018 | 8.8 | 26 | NO | NO |
CVE-2008-6061MEDIUM Cross-site scripting (XSS) vulnerability in ActionScript in arbitrary Shockwave Flash (SWF) controller files created by Techsmith Camtasia Studio before 5 allows remote attackers t | Feb 5, 2009 | 4.3 | 22 | NO | YES |
Signals from CVEs in this vendor scope (14 CVEs).
An overview of all social media posts that mention a CVE ID that affects a product developed by Techsmith.
Media articles that mention a CVE ID that affects a product developed by Techsmith — matched by CVE ID, not by vendor name.