vlc:vlc-demux-dec-libfuzzer: Heap-buffer-overflow in libebml::ReadCodedSizeValue

Project: https://github.com/videolan/vlc.git Detailed Report: https://oss-fuzz.com/testcase?key=5849924137975808 Project: vlc Fuzzing Engine: libFuzzer Fuzz Target: vlc-demux-dec-libfuzzer Job Type: libfuzzerasanvlc Platform Id: linux Crash Type: Heap-buffer-overflow READ 8 Crash Address:...

CVE-2015-8791

The EbmlElement::ReadCodedSizeValue function in libEBML before 1.3.3 allows context-dependent attackers to obtain sensitive information from process heap memory via a crafted length value in an EBML id, which triggers an invalid memory access...

CVE-2015-8791

The EbmlElement::ReadCodedSizeValue function in libEBML before 1.3.3 allows context-dependent attackers to obtain sensitive information from process heap memory via a crafted length value in an EBML id, which triggers an invalid memory access...

CVE-2015-8791: Exposure of Sensitive Information to an Unauthorized Actor

The EbmlElement::ReadCodedSizeValue function in libEBML before 1.3.3 allows context-dependent attackers to obtain sensitive information from process heap memory via a crafted length value in an EBML id, which triggers an invalid memory access...

PT-2016-4021

Name of the Vulnerable Software and Affected Versions libEBML versions prior to 1.3.3 Description The issue allows context-dependent attackers to obtain sensitive information from process heap memory via a crafted length value in an EBML id, which triggers an invalid memory access. This occurs in...