CVE-2024-37017

asdcplib aka AS-DCP Lib 2.13.1 has a heap-based buffer over-read in ASDCP::TimedText::MXFReader::hReader::MDtoTimedTextTDesc in ASDCPTimedText.cpp in libasdcp.so...

CVE-2024-37017

The asdcplib (also known as AS-DCP Lib) version 2.13.1 is vulnerable to a heap-based buffer over-read . This flaw is located within the ASDCP::TimedText::MXFReader::h__Reader::MD_to_TimedText_TDesc function in the AS_DCP_TimedText.cpp file of the libasdcp.so library. The vulnerability stems from ...