PT-2022-12441 · Tsmuxer · Tsmuxer

Aug5T7O · Published 2022-03-01 · Updated 2022-03-09 · CVE-2021-45861

Positive Technologies (AI Summary)

CVSS v3.1

5.5

Medium

Base vector

AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H

Name of the Vulnerable Software and Affected Versions tsMuxer version git-c6a0277

Description The issue occurs due to an assertion failure in the BitStreamReader::skipBits function located in the /bitStream.h file at line 132. This failure happens when the condition num <= INT BIT is not met.

Recommendations For tsMuxer version git-c6a0277, as a temporary workaround, consider modifying the skipBits function in the BitStreamReader class to handle cases where num exceeds INT BIT to prevent the assertion failure. At the moment, there is no information about a newer version that contains a fix for this issue.

Exploit

Fix

Assertion Failure

Weakness Enumeration

CWE-617

Related Identifiers

CVE-2021-45861

Affected Products

Tsmuxer

References · 4

• 🔥 https://github.com/justdan96/tsMuxer/issues/478 · Exploit
• https://github.com/justdan96/tsMuxer/pull/481 · Patch
• https://nvd.nist.gov/vuln/detail/CVE-2021-45861 · Security Note
• https://osv.dev/vulnerability/CVE-2021-45861 · Vendor Advisory