Matroska vulnerabilities

16 vulnerabilities

Known vulnerabilities in Matroska products, newest first, with CVSS severity, EPSS, KEV listings and ransomware use, across 6 products.

Products

6
RoutineCVE-2023-52339matroska · libebml +3 morematroska libebmlIn libebml before 1.4.5, an integer overflow in MemIOCallback.cpp can occur when reading or writing. It may result in buffer overflows.CVSS6.5MediumEPSS1.10%RoutineCVE-2021-3405debian · debian_linux +9 moredebian debian_linuxA flaw was found in libebml before 1.4.2. A heap overflow bug exists in the implementation of EbmlString::ReadData and EbmlUnicodeString::ReadData in libebml.CVSS6.5MediumEPSS1.73%RoutineCVE-2017-12803matroska · mkcleanmatroska mkcleanThe Node_ValidatePtr function in corec/corec/node/node.c in mkclean 0.8.9 allows remote attackers to cause a denial of service (assert fault) via a crafted mkv file.CVSS6.5MediumEPSS2.24%RoutineCVE-2017-12802matroska · libebml2 +2 morematroska libebml2The EBML_IntegerValue function in ebmlnumber.c in libebml2 through 2012-08-26 allows remote attackers to cause a denial of service (assert fault) via a crafted mkv file.CVSS6.5MediumEPSS2.42%RoutineCVE-2017-12801matroska · libebml2 +2 morematroska libebml2The UpdateDataSize function in ebmlmaster.c in libebml2 through 2012-08-26 allows remote attackers to cause a denial of service (assert fault) via a crafted mkv file.CVSS6.5MediumEPSS2.42%RoutineCVE-2017-12800matroska · libebml2 +2 morematroska libebml2The EBML_FindNextElement function in ebmlmain.c in libebml2 through 2012-08-26 allows remote attackers to cause a denial of service (Null pointer dereference and application crash) via a crafted mkv file.CVSS6.5MediumEPSS2.42%RoutineCVE-2017-12783matroska · libebml2 +2 morematroska libebml2The ReadDataFloat function in ebmlnumber.c in libebml2 through 2012-08-26 allows remote attackers to cause a denial of service (assert fault) via a crafted mkv file.CVSS6.5MediumEPSS2.42%RoutineCVE-2017-12782matroska · libebml2 +2 morematroska libebml2The ReadData function in ebmlmaster.c in libebml2 through 2012-08-26 allows remote attackers to cause a denial of service (assert fault) via a crafted mkv file.CVSS6.5MediumEPSS2.42%RoutineCVE-2017-12781matroska · libebml2 +2 morematroska libebml2The EBML_BufferToID function in ebmlelement.c in libebml2 through 2012-08-26 allows remote attackers to cause a denial of service (Null pointer dereference and application crash) via a crafted mkv file.CVSS6.5MediumEPSS2.42%RoutineCVE-2017-12780matroska · libebml2 +2 morematroska libebml2The ReadData function in ebmlstring.c in libebml2 through 2012-08-26 allows remote attackers to cause a denial of service (invalid free and application crash) via a crafted mkv file.CVSS6.5MediumEPSS2.42%RoutineCVE-2017-12779matroska · mkvalidatormatroska mkvalidatorThe Node_GetData function in corec/corec/node/node.c in mkvalidator 0.5.1 allows remote attackers to cause a denial of service (Null pointer dereference and application crash) via a crafted mkv file.CVSS6.5MediumEPSS2.24%RoutineCVE-2015-8792matroska · libmatroska +4 morematroska libmatroskaThe KaxInternalBlock::ReadData function in libMatroska before 1.4.4 allows context-dependent attackers to obtain sensitive information from process heap memory via crafted EBML lacing, which triggers an invalid memory access.CVSS5.3MediumEPSS1.45%RoutineCVE-2015-8791matroska · libebml +2 morematroska libebmlThe EbmlElement::ReadCodedSizeValue function in libEBML before 1.3.3 allows context-dependent attackers to obtain sensitive information from process heap memory via a crafted length value in an EBML id, which triggers an invalid memory access.CVSS4.3MediumEPSS1.34%RoutineCVE-2015-8790matroska · libebml +2 morematroska libebmlThe EbmlUnicodeString::UpdateFromUTF8 function in libEBML before 1.3.3 allows context-dependent attackers to obtain sensitive information from process heap memory via a crafted UTF-8 string, which triggers an invalid memory access.CVSS4.3MediumEPSS1.85%PrioritiseCVE-2015-8789matroska · libebml +2 morematroska libebmlUse-after-free vulnerability in the EbmlMaster::Read function in libEBML before 1.3.3 allows context-dependent attackers to have unspecified impact via a "deeply nested element with infinite size" followed by another element of an upper level in an EBML document.CVSS9.6CriticalEPSS2.13%RoutineCVE-2008-1161matroska · demuxermatroska demuxerBuffer overflow in the Matroska demuxer (demuxers/demux_matroska.c) in xine-lib before 1.1.10.1 allows remote attackers to cause a denial of service (crash) and possibly execute arbitrary code via a Matroska file with invalid frame sizes.CVSS9.3CriticalEPSS6.91%