PT-2015-7935 · FFmpeg · Libmatroska+1

Published 2015-11-05 · Updated 2015-11-05

Positive Technologies (AI Summary)

Name of the Vulnerable Software and Affected Versions libebml versions prior to 1.3.3 libmatroska versions prior to 1.4.4

Description The issue arises from two problems in libebml. Firstly, when the parser encounters a deeply nested element with an infinite size, it fails to propagate the following element of an upper level correctly, resulting in memory access after freeing and multiple attempts to free the same memory address. Secondly, when reading from a UTF-8 string where the length indicated by a UTF-8 character's first byte exceeds the string's actual number of bytes, the parser accesses beyond the end of the string, leading to a heap information leak.

Recommendations For libebml versions prior to 1.3.3, update to version 1.3.3 to fix the issues. For libmatroska versions prior to 1.4.4, update to version 1.4.4 to fix the issues.

Related Identifiers

MGASA-2015-0430

Affected Products

Libebml

Libmatroska

References · 6

• https://advisories.mageia.org/MGASA-2015-0430.html · Security Note
• https://osv.dev/vulnerability/MGASA-2015-0430 · Vendor Advisory
• http://talosintel.com/vulnerability-reports · Note
• http://lists.matroska.org/pipermail/matroska-users/2015-October/006981.html · Note
• https://bugs.mageia.org/show_bug.cgi?id=17004 · Note
• http://lists.matroska.org/pipermail/matroska-users/2015-October/006985.html · Note