Matroska

16 CVEs across 6 Matroska products. Browse Matroska vulnerabilities, severities, and proof-of-concept exploits.

Matroska products with known CVEs

ProductCVEs
Mkclean8
Mkvalidator8
Libebml27
Libebml5
Demuxer1
Libmatroska1
Matroska CVEs — newest first
CVESeverityScorePublishedSummary
CVE-2023-52339Medium6.52024-01-12In libebml before 1.4.5, an integer overflow in MemIOCallback.cpp can occur when reading or writing. It may result in buffer overflows.
CVE-2021-3405Medium6.52021-02-23A flaw was found in libebml before 1.4.2. A heap overflow bug exists in the implementation of EbmlString::ReadData and EbmlUnicodeString::ReadData in libebml.
CVE-2017-12803Medium6.52017-11-10The Node_ValidatePtr function in corec/corec/node/node.c in mkclean 0.8.9 allows remote attackers to cause a denial of service (assert fault) via a crafted mkv…
CVE-2017-12802Medium6.52017-11-10The EBML_IntegerValue function in ebmlnumber.c in libebml2 through 2012-08-26 allows remote attackers to cause a denial of service (assert fault) via a crafted…
CVE-2017-12801Medium6.52017-11-10The UpdateDataSize function in ebmlmaster.c in libebml2 through 2012-08-26 allows remote attackers to cause a denial of service (assert fault) via a crafted mk…
CVE-2017-12800Medium6.52017-11-10The EBML_FindNextElement function in ebmlmain.c in libebml2 through 2012-08-26 allows remote attackers to cause a denial of service (Null pointer dereference a…
CVE-2017-12783Medium6.52017-11-10The ReadDataFloat function in ebmlnumber.c in libebml2 through 2012-08-26 allows remote attackers to cause a denial of service (assert fault) via a crafted mkv…
CVE-2017-12782Medium6.52017-11-10The ReadData function in ebmlmaster.c in libebml2 through 2012-08-26 allows remote attackers to cause a denial of service (assert fault) via a crafted mkv file.
CVE-2017-12781Medium6.52017-11-10The EBML_BufferToID function in ebmlelement.c in libebml2 through 2012-08-26 allows remote attackers to cause a denial of service (Null pointer dereference and…
CVE-2017-12780Medium6.52017-11-10The ReadData function in ebmlstring.c in libebml2 through 2012-08-26 allows remote attackers to cause a denial of service (invalid free and application crash)…
CVE-2017-12779Medium6.52017-11-10The Node_GetData function in corec/corec/node/node.c in mkvalidator 0.5.1 allows remote attackers to cause a denial of service (Null pointer dereference and ap…
CVE-2015-8792Medium5.32016-01-29The KaxInternalBlock::ReadData function in libMatroska before 1.4.4 allows context-dependent attackers to obtain sensitive information from process heap memory…
CVE-2015-8791Medium4.32016-01-29The EbmlElement::ReadCodedSizeValue function in libEBML before 1.3.3 allows context-dependent attackers to obtain sensitive information from process heap memor…
CVE-2015-8790Medium4.32016-01-29The EbmlUnicodeString::UpdateFromUTF8 function in libEBML before 1.3.3 allows context-dependent attackers to obtain sensitive information from process heap mem…
CVE-2015-8789Critical9.62016-01-29Use-after-free vulnerability in the EbmlMaster::Read function in libEBML before 1.3.3 allows context-dependent attackers to have unspecified impact via a "deep…
CVE-2008-11612008-03-10Buffer overflow in the Matroska demuxer (demuxers/demux_matroska.c) in xine-lib before 1.1.10.1 allows remote attackers to cause a denial of service (crash) an…