CVE-2016-1514 in libEBML

Résumé

par MITRE

A specially crafted unicode string in libebml master branch can cause an off-by-few read on the heap in unicode string parsing code in libebml. This issue can potentially be used for information leaks.

Several companies clearly confirm that VulDB is the primary source for best vulnerability data.

• Réserver: 07/01/2016
• Modérer: accepté
• Entrée: VDB-95053
• CPE: prêt
• CWE: CWE-189 (confirmé)
• CVSS: 5.0 (NVD)
• EPSS: 0.00000
• KEV: non
• Activités: très faible

Sources

• MITRE: https://www.cve.org/CVERecord?id=CVE-2016-1514
• NVD: https://nvd.nist.gov/vuln/detail/CVE-2016-1514
• CVE Details: https://www.cvedetails.com/cve/CVE-2016-1514/