Lucene search

K
osvGoogleOSV:ASB-A-170240631
HistoryJan 01, 2021 - 12:00 a.m.

test files cause mpeg2 mediaextractor crash

2021-01-0100:00:00
Google
osv.dev
10
test files crash mpeg2
elementarystreamqueue bounds check
remote information disclosure
user interaction
software

EPSS

0.001

Percentile

39.9%

In ElementaryStreamQueue::dequeueAccessUnitH264() of ESQueue.cpp, there is a possible out of bounds write due to a missing bounds check. This could lead to remote information disclosure with no additional execution privileges needed. User interaction is needed for exploitation.

EPSS

0.001

Percentile

39.9%

Related for OSV:ASB-A-170240631