Debian Libmediainfo vulnerabilities

CVE-2020-26797 [HIGH] CVE-2020-26797: libmediainfo - Mediainfo before version 20.08 has a heap buffer overflow vulnerability via Medi... Mediainfo before version 20.08 has a heap buffer overflow vulnerability via MediaInfoLib::File_Gxf::ChooseParser_ChannelGrouping. Scope: local bookworm: resolved (fixed in 20.09+dfsg-2) bullseye: resolved (fixed in 20.09+dfsg-2) forky: resolved (fixed in 20.09+dfsg-2) sid: resolved (fixed in 20.09+dfsg-2) trixie: resolved (fixed in 20.09+dfsg-2)

CVE-2020-15395 [HIGH] CVE-2020-15395: libmediainfo - In MediaInfoLib in MediaArea MediaInfo 20.03, there is a stack-based buffer over... In MediaInfoLib in MediaArea MediaInfo 20.03, there is a stack-based buffer over-read in Streams_Fill_PerStream in Multiple/File_MpegPs.cpp (aka an off-by-one during MpegPs parsing). Scope: local bookworm: resolved (fixed in 20.09+dfsg-1) bullseye: resolved (fixed in 20.09+dfsg-1) forky: resolved (fixed in 20.09+dfsg-1) sid: resolved (fixed in 20.09+dfsg-1) tri

CVE-2019-11372 [MEDIUM] CVE-2019-11372: libmediainfo - An out-of-bounds read in MediaInfoLib::File__Tags_Helper::Synched_Test in Tag/Fi... An out-of-bounds read in MediaInfoLib::File__Tags_Helper::Synched_Test in Tag/File__Tags.cpp in MediaInfoLib in MediaArea MediaInfo 18.12 leads to a crash. Scope: local bookworm: resolved (fixed in 18.12-2) bullseye: resolved (fixed in 18.12-2) forky: resolved (fixed in 18.12-2) sid: resolved (fixed in 18.12-2) trixie: resolved (fixed in 18.12-2)

CVE-2019-11373 [MEDIUM] CVE-2019-11373: libmediainfo - An out-of-bounds read in File__Analyze::Get_L8 in File__Analyze_Buffer.cpp in Me... An out-of-bounds read in File__Analyze::Get_L8 in File__Analyze_Buffer.cpp in MediaInfoLib in MediaArea MediaInfo 18.12 leads to a crash. Scope: local bookworm: resolved (fixed in 18.12-2) bullseye: resolved (fixed in 18.12-2) forky: resolved (fixed in 18.12-2) sid: resolved (fixed in 18.12-2) trixie: resolved (fixed in 18.12-2)