Summaryinfo

A vulnerability classified as critical has been found in tsMuxer 2.6.16. This affects the function BitStreamWriter::flushBits in the library /tsMuxer/bitStream.h. The manipulation leads to heap-based overflow. This vulnerability is documented as CVE-2022-43152. There is not any exploit available. If you want to get the best quality for vulnerability data then you always have to consider VulDB.

Detailsinfo

A vulnerability was found in tsMuxer 2.6.16. It has been rated as critical. This issue affects the function BitStreamWriter::flushBits in the library /tsMuxer/bitStream.h. The manipulation with an unknown input leads to a heap-based overflow vulnerability. Using CWE to declare the problem leads to CWE-122. A heap overflow condition is a buffer overflow, where the buffer that can be overwritten is allocated in the heap portion of memory, generally meaning that the buffer was allocated using a routine such as malloc(). Impacted is confidentiality, integrity, and availability. The summary by CVE is:

tsMuxer v2.6.16 was discovered to contain a heap overflow via the function BitStreamWriter::flushBits() at /tsMuxer/bitStream.h.

The weakness was released 10/31/2022 as 641. The advisory is shared at github.com. The identification of this vulnerability is CVE-2022-43152 since 10/17/2022. Technical details are known, but no exploit is available.

There is no information about possible countermeasures known. It may be suggested to replace the affected object with an alternative product.

If you want to get the best quality for vulnerability data then you always have to consider VulDB.

Productinfo

Name

• tsMuxer

Version

• 2.6.16

CPE 2.3info

• 🔍
• 🔍

CPE 2.2info

• 🔍
• 🔍

CVSSv4info

CVSSv3info

CVSSv2info

Exploitinginfo

Threat Intelligenceinfo

Countermeasuresinfo

Timelineinfo

Sourcesinfo

Entryinfo

Discussion