The EbmlElement::ReadCodedSizeValue function in libEBML prior to 1.3.3 allows context-dependent malicious users to obtain sensitive information from process heap memory via a crafted length value in an EBML id, which triggers an invalid memory access.
Vulnerable Product | Search on Vulmon | Subscribe to Product |
---|---|---|
matroska libebml |