In MediaInfoLib in MediaArea MediaInfo 20.03, there is a stack-based buffer over-read in Streams_Fill_PerStream in Multiple/File_MpegPs.cpp (aka an off-by-one during MpegPs parsing).
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Debian | — | Upgrade libmediainfo | Mar 25, 2021 | Jun 30, 2020 |
| Suse | — | Upgrade libmediainfo0Upgrade mediainfoUpgrade libmediainfo0-32bitUpgrade mediainfo-guiUpgrade libmediainfo-develUpgrade kf5-mediainfo | Sep 20, 2020 | Jun 30, 2020 |
| Ubuntu | — | Upgrade libmediainfo0 (Ubuntu Pro)Upgrade libmediainfo0v5 (Ubuntu Pro) | Mar 22, 2023 | Jun 30, 2020 |
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub