Matroska
14 CVEs across 6 Matroska products. Browse Matroska vulnerabilities, severities, and proof-of-concept exploits.
Matroska products with known CVEs
Matroska CVEs — newest first| CVE | Severity | Score | Published | Summary |
|---|
CVE-2023-52339 | Medium | 6.5 | 2024-01-12 | In libebml before 1.4.5, an integer overflow in MemIOCallback.cpp can occur when reading or writing. It may result in buffer overflows. |
CVE-2021-3405 | Medium | 6.5 | 2021-02-23 | A flaw was found in libebml before 1.4.2. A heap overflow bug exists in the implementation of EbmlString::ReadData and EbmlUnicodeString::ReadData in libebml. |
CVE-2017-12803 | Medium | 6.5 | 2017-11-10 | The Node_ValidatePtr function in corec/corec/node/node.c in mkclean 0.8.9 allows remote attackers to cause a denial of service (assert fault) via a crafted mkv… |
CVE-2017-12802 | Medium | 6.5 | 2017-11-10 | The EBML_IntegerValue function in ebmlnumber.c in libebml2 through 2012-08-26 allows remote attackers to cause a denial of service (assert fault) via a crafted… |
CVE-2017-12801 | Medium | 6.5 | 2017-11-10 | The UpdateDataSize function in ebmlmaster.c in libebml2 through 2012-08-26 allows remote attackers to cause a denial of service (assert fault) via a crafted mk… |
CVE-2017-12800 | Medium | 6.5 | 2017-11-10 | The EBML_FindNextElement function in ebmlmain.c in libebml2 through 2012-08-26 allows remote attackers to cause a denial of service (Null pointer dereference a… |
CVE-2017-12783 | Medium | 6.5 | 2017-11-10 | The ReadDataFloat function in ebmlnumber.c in libebml2 through 2012-08-26 allows remote attackers to cause a denial of service (assert fault) via a crafted mkv… |
CVE-2017-12782 | Medium | 6.5 | 2017-11-10 | The ReadData function in ebmlmaster.c in libebml2 through 2012-08-26 allows remote attackers to cause a denial of service (assert fault) via a crafted mkv file. |
CVE-2017-12781 | Medium | 6.5 | 2017-11-10 | The EBML_BufferToID function in ebmlelement.c in libebml2 through 2012-08-26 allows remote attackers to cause a denial of service (Null pointer dereference and… |
CVE-2017-12780 | Medium | 6.5 | 2017-11-10 | The ReadData function in ebmlstring.c in libebml2 through 2012-08-26 allows remote attackers to cause a denial of service (invalid free and application crash)… |
CVE-2017-12779 | Medium | 6.5 | 2017-11-10 | The Node_GetData function in corec/corec/node/node.c in mkvalidator 0.5.1 allows remote attackers to cause a denial of service (Null pointer dereference and ap… |
CVE-2015-8792 | Medium | 5.3 | 2016-01-29 | The KaxInternalBlock::ReadData function in libMatroska before 1.4.4 allows context-dependent attackers to obtain sensitive information from process heap memory… |
CVE-2015-8791 | Medium | 4.3 | 2016-01-29 | The EbmlElement::ReadCodedSizeValue function in libEBML before 1.3.3 allows context-dependent attackers to obtain sensitive information from process heap memor… |
CVE-2015-8790 | Medium | 4.3 | 2016-01-29 | The EbmlUnicodeString::UpdateFromUTF8 function in libEBML before 1.3.3 allows context-dependent attackers to obtain sensitive information from process heap mem… |
CVE-2015-8789 | Critical | 9.6 | 2016-01-29 | Use-after-free vulnerability in the EbmlMaster::Read function in libEBML before 1.3.3 allows context-dependent attackers to have unspecified impact via a "deep… |
CVE-2008-1161 | | | 2008-03-10 | Buffer overflow in the Matroska demuxer (demuxers/demux_matroska.c) in xine-lib before 1.1.10.1 allows remote attackers to cause a denial of service (crash) an… |