69 matches found
CVE-2026-107389
music-metadata is a metadata parser for audio and video media files. Prior to 11.16.0, the Matroska and WebM EBML parser decodes an attacker-controlled VINT element length and uses it for string-token or Uint8Array allocation before confirming that the leaf fits within its parent or available...
music-metadata: EBML parser trusts element lengths, allowing memory exhaustion or process abort
Summary The Matroska/WebM EBML parser decodes attacker-controlled variable-length integer VINT element lengths without first validating that the declared element fits within its enclosing container or the available input. Leaf lengths are then used directly for string-token and Uint8Array...
NPM: music-metadata: EBML parser trusts element lengths, allowing memory exhaustion or process abort
NPM: music-metadata: EBML parser trusts element lengths, allowing memory exhaustion or process abort vulnerability discovered by ? in WordPress Npm music-metadata versions 11.16.0...
CVE-2026-107389
The music-metadata metadata parser for audio and video media files is vulnerable to memory exhaustion or process aborts in versions prior to 11.16.0 . The Matroska and WebM EBML parsers fail to validate that a decoded VINT element length fits within its parent or the available input before alloca...
CVE-2026-107389 music-metadata: EBML parser trusts element lengths, allowing memory exhaustion or process abort
music-metadata is a metadata parser for audio and video media files. Prior to 11.16.0, the Matroska and WebM EBML parser decodes an attacker-controlled VINT element length and uses it for string-token or Uint8Array allocation before confirming that the leaf fits within its parent or available...
EUVD-2026-95238
music-metadata is a metadata parser for audio and video media files. Prior to 11.16.0, the Matroska and WebM EBML parser decodes an attacker-controlled VINT element length and uses it for string-token or Uint8Array allocation before confirming that the leaf fits within its parent or available...
EUVD-2008-5213
Malware in sbrugna...
EUVD-2015-8661
Malware in sbrugna...
EUVD-2015-8664
Malware in sbrugna...
EUVD-2019-5262
Malware in sbrugna...
Matroska libebml Security Vulnerability
Matroska libebml is a GlobalMatroska open source application providing low-level C++ libraries for reading and writing Matroska files. A security vulnerability exists in Matroska libebml versions prior to 1.4.5, which stems from an integer overflow that may occur when reading or writing, which ma...
Debian: Security Advisory (DLA-438-1)
The remote host is missing an update for the Debian SPDX-FileCopyrightText: 2023 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...
SUSE CVE-2015-8789
Use-after-free vulnerability in the EbmlMaster::Read function in libEBML before 1.3.3 allows context-dependent attackers to have unspecified impact via a "deeply nested element with infinite size" followed by another element of an upper level in an EBML document...
SUSE CVE-2015-8791
The EbmlElement::ReadCodedSizeValue function in libEBML before 1.3.3 allows context-dependent attackers to obtain sensitive information from process heap memory via a crafted length value in an EBML id, which triggers an invalid memory access...
SUSE CVE-2015-8792
The KaxInternalBlock::ReadData function in libMatroska before 1.4.4 allows context-dependent attackers to obtain sensitive information from process heap memory via crafted EBML lacing, which triggers an invalid memory access...
SUSE CVE-2019-13615
libebml before 1.3.6, as used in the MKV module in VideoLAN VLC Media Player binaries before 3.0.3, has a heap-based buffer over-read in EbmlElement::FindNextElement...
The vulnerability in the implementation of EbmlString::ReadData and EbmlUnicodeString::ReadData functions of the EBML analysis library Libebml, related to writing beyond the buffer boundary, allows a attacker to cause a service failure.
The vulnerability in the implementation of EbmlString::ReadData and EbmlUnicodeString::ReadData functions of the EBML analysis library in Libebml is related to writing beyond the buffer boundaries. Exploiting this vulnerability could allow a malicious actor to cause service interruptions...
The vulnerability of the EbmlTypeDispatcher::send function in the VLC Media Player, related to writing beyond the buffer boundary, allows an attacker to access confidential information or cause a service failure.
The vulnerability of the EbmlTypeDispatcher::send function in the VLC Media Player lies in the handling of buffer overflows. Exploiting this vulnerability could allow an attacker to gain access to confidential information or cause service failures...
Debian DLA-2629-1 : libebml security update
A heap overflow issue was detected in libebml, a library to read and write files in the EBML format, a binary pendant to XML. These issues appeared in several ReadData functions of various data type classes. This update also fixes the issue in EbmlString::ReadData and EbmlUnicodeString::ReadData,...
