PT-2015-7935 · FFmpeg · Libmatroska+1
Publicado
2015-11-05
·
Atualizado
2015-11-05
Nenhuma
Não há classificações de severidade ou métricas disponíveis. Quando houver, atualizaremos as informações correspondentes na página.
Name of the Vulnerable Software and Affected Versions
libebml versions prior to 1.3.3
libmatroska versions prior to 1.4.4
Description
The issue arises from two problems in libebml. Firstly, when the parser encounters a deeply nested element with an infinite size, it fails to propagate the following element of an upper level correctly, resulting in memory access after freeing and multiple attempts to free the same memory address. Secondly, when reading from a UTF-8 string where the length indicated by a UTF-8 character's first byte exceeds the string's actual number of bytes, the parser accesses beyond the end of the string, leading to a heap information leak.
Recommendations
For libebml versions prior to 1.3.3, update to version 1.3.3 to fix the issues.
For libmatroska versions prior to 1.4.4, update to version 1.4.4 to fix the issues.
Encontrou algum problema na descrição? Tem algo a acrescentar? Fique à vontade para nos escrever 👾
Identificadores relacionados
Produtos afetados
Libebml
Libmatroska