An out-of-bounds read in File__Analyze::Get_L8 in File__Analyze_Buffer.cpp in MediaInfoLib in MediaArea MediaInfo 18.12 leads to a crash.
CVSS Details
- CVSS 3.1 Base Score: 6.5
- CVSS 3.0 Vector: (CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H)
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Debian | — | Upgrade libmediainfo | Mar 24, 2021 | Apr 20, 2019 |
| Suse | — | Upgrade libmediainfo0-32bitUpgrade libmediainfo0-64bitUpgrade libmediainfo-develUpgrade libmediainfo0 | Jun 27, 2019 | Apr 20, 2019 |
| Ubuntu | — | Upgrade libmediainfo0v5 (Ubuntu Pro)Upgrade libmediainfo0 (Ubuntu Pro)Upgrade python-mediainfodll (Ubuntu Pro)Upgrade libmediainfo0v5Upgrade python3-mediainfodll (Ubuntu Pro) | May 17, 2019 | Apr 20, 2019 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub