Vulnerabilities

TI-2023-28722 CVE-2023-52339 · GHSA-vmjp-26xc-5h39

In libebml before 1.4.5, an integer overflow in MemIOCallback.cpp can occur when reading…

MEDIUM 62

In libebml before 1.4.5, an integer overflow in MemIOCallback.cpp can occur when reading or writing.

CVSS 3.1MEDIUM 6.5 Network No auth User interaction EPSS 0.01097 Published 2024-01-12 No fix listed CWE-190

TI-2021-02372 CVE-2021-3405 · GHSA-xc72-rxv8-3m23

Out-of-bounds write in libebml

LOW 32

A flaw was found in libebml before 1.4.2.

CVSS 3.1MEDIUM 6.5 Network No auth User interaction EPSS 0.01729 Published 2021-02-23 Fixed in 1.4.2 CWE-787

TI-2015-07237 CVE-2015-8791 · GHSA-wrxq-929q-rj83

The EbmlElement::ReadCodedSizeValue function in libEBML before 1.3.3 allows…

LOW 23

The EbmlElement::ReadCodedSizeValue function in libEBML before 1.3.3 allows context-dependent attackers to obtain sensitive information from process heap memory via a crafted length value in an EBML id, which triggers an…

CVSS 3.0MEDIUM 4.3 Network No auth User interaction EPSS 0.01341 Published 2016-01-29 No fix listed CWE-200

TI-2015-07236 CVE-2015-8790 · GHSA-jhvm-j3gg-ph57

The EbmlUnicodeString::UpdateFromUTF8 function in libEBML before 1.3.3 allows…

LOW 24

The EbmlUnicodeString::UpdateFromUTF8 function in libEBML before 1.3.3 allows context-dependent attackers to obtain sensitive information from process heap memory via a crafted UTF-8 string, which triggers an invalid mem…

CVSS 3.0MEDIUM 4.3 Network No auth User interaction EPSS 0.01848 Published 2016-01-29 No fix listed CWE-200

TI-2015-07235 CVE-2015-8789 · GHSA-h7v7-5ph3-4v3p

Use-after-free vulnerability in the EbmlMaster::Read function in libEBML before 1.3.3…

MEDIUM 45

Use-after-free vulnerability in the EbmlMaster::Read function in libEBML before 1.3.3 allows context-dependent attackers to have unspecified impact via a "deeply nested element with infinite size" followed by another ele…

CVSS 3.0CRITICAL 9.6 Network No auth User interaction EPSS 0.02126 Published 2016-01-29 No fix listed