Matroska Libebml vulnerabilities
6 known vulnerabilities affecting matroska/libebml.
Total CVEs
6
CISA KEV
0
Public exploits
0
Exploited in wild
0
Severity breakdown
CRITICAL1MEDIUM5
Vulnerabilities
Page 1 of 1
CVE-2023-52339MEDIUMCVSS 6.5fixed in 1.4.52024-01-12
CVE-2023-52339 [MEDIUM] CWE-190 CVE-2023-52339: In libebml before 1.4.5, an integer overflow in MemIOCallback.cpp can occur when reading or writing.
In libebml before 1.4.5, an integer overflow in MemIOCallback.cpp can occur when reading or writing. It may result in buffer overflows.
nvdosv
CVE-2021-3405MEDIUMCVSS 6.5fixed in 1.4.2vbefore 1.4.22021-02-23
CVE-2021-3405 [MEDIUM] CWE-787 CVE-2021-3405: A flaw was found in libebml before 1.4.2. A heap overflow bug exists in the implementation of EbmlSt
A flaw was found in libebml before 1.4.2. A heap overflow bug exists in the implementation of EbmlString::ReadData and EbmlUnicodeString::ReadData in libebml.
cvelistv5nvdosv
CVE-2019-13615MEDIUMCVSS 5.5≥ 0, < 1.3.6-12019-07-16
CVE-2019-13615 [MEDIUM] CVE-2019-13615: libebml before 1
libebml before 1.3.6, as used in the MKV module in VideoLAN VLC Media Player binaries before 3.0.3, has a heap-based buffer over-read in EbmlElement::FindNextElement.
osv
CVE-2015-8789CRITICALCVSS 9.6≤ 1.3.22016-01-29
CVE-2015-8789 [CRITICAL] CVE-2015-8789: Use-after-free vulnerability in the EbmlMaster::Read function in libEBML before 1.3.3 allows context
Use-after-free vulnerability in the EbmlMaster::Read function in libEBML before 1.3.3 allows context-dependent attackers to have unspecified impact via a "deeply nested element with infinite size" followed by another element of an upper level in an EBML document.
nvdosv
CVE-2015-8790MEDIUMCVSS 4.3≤ 1.3.22016-01-29
CVE-2015-8790 [MEDIUM] CWE-200 CVE-2015-8790: The EbmlUnicodeString::UpdateFromUTF8 function in libEBML before 1.3.3 allows context-dependent atta
The EbmlUnicodeString::UpdateFromUTF8 function in libEBML before 1.3.3 allows context-dependent attackers to obtain sensitive information from process heap memory via a crafted UTF-8 string, which triggers an invalid memory access.
nvdosv
CVE-2015-8791MEDIUMCVSS 4.3≤ 1.3.22016-01-29
CVE-2015-8791 [MEDIUM] CWE-200 CVE-2015-8791: The EbmlElement::ReadCodedSizeValue function in libEBML before 1.3.3 allows context-dependent attack
The EbmlElement::ReadCodedSizeValue function in libEBML before 1.3.3 allows context-dependent attackers to obtain sensitive information from process heap memory via a crafted length value in an EBML id, which triggers an invalid memory access.
nvdosv