CVE-2015-8790: matroska libebml
Vulnerability summary
CVE-2015-8790 is a medium (CVSS 4.3) vulnerability in matroska libebml. EPSS estimates a 1.85% chance of exploitation in the next 30 days, higher than 79.1% of scored vulnerabilities.
Not severe (CVSS 4.3, network access); no exploitation reported by the 5 checked sources
Source freshness unavailable
How is this decided?Advisory lineage
Upstream 0 · Downstream 2 · Duplicates 1Timeline
- 29-01-2016PublishedVulnerability first disclosed.
- 06-08-2024Last modifiedVulnerability information updated.
Description
The EbmlUnicodeString::UpdateFromUTF8 function in libEBML before 1.3.3 allows context-dependent attackers to obtain sensitive information from process heap memory via a crafted UTF-8 string, which triggers an invalid memory access.
CVSS metrics
4 scores · 3 sources · 2 versions- OSV · UbuntuEcosystem advisory · calculated4.3MediumCVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:L/I:N/A:N
- OSV · DebianEcosystem advisory · calculated4.3MediumCVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:L/I:N/A:N
EPSS trend
Probability
1.85%
Chance of exploitation in the next 30 days
Percentile
79%
Versus all other CVEs
30-day change
No change 0.00 pp
From 1.85% on 04-10-2026
Known exploited
Compare KEV catalogs
CISA KEVNot in the CISA KEV catalog.
ENISA CNWNot in the ENISA CNW catalog.
CIRCLNot in the CIRCL catalog.
Public exploits
0 foundNo public exploits indexed.
Weaknesses
CWE · root causeAffected systems
Known conditions: network-reachable, no authentication, user interaction (CVSS vector). Other conditions: not stated in public data.
Debian1 product
- libebml< 1.3.3-1
Matroska1 product
- libebml≤ 1.3.2
Ubuntu1 product
- libebml< 1.3.0-2+deb8u1build0.14.04.1
3 vendors · 3 products
References
11 links
- github.com/Matroska-Org/libebml/commit/ababb64e0c792ad2a314245233db0833ba12036bX Refsource CONFIRMREPORT
- www.talosintelligence.com/reports/TALOS-2016-0036/X Refsource MISC
- lists.matroska.org/pipermail/matroska-users/2015-October/006985.htmlMailing ListX Refsource MLISTVendor AdvisoryREPORT
- github.com/Matroska-Org/libebml/blob/release-1.3.3/ChangeLogX Refsource CONFIRMVendor AdvisoryREPORT