2 matches found
CVE-2015-8790: Exposure of Sensitive Information to an Unauthorized Actor
The EbmlUnicodeString::UpdateFromUTF8 function in libEBML before 1.3.3 allows context-dependent attackers to obtain sensitive information from process heap memory via a crafted UTF-8 string, which triggers an invalid memory access...
4.3CVSS6.2AI score0.01848EPSS
SaveExploits0References2
Updated libebml packages fix security vulnerability
In EbmlMaster::Read in libebml before 1.3.3, when the parser encountered a deeply nested element with an infinite size then a following element of an upper level was not propagated correctly. Instead the element with the infinite size was added into the EBML element tree a second time resulting i...
2.1AI score
SaveExploits0References4
20