CVE-2015-8791: Infoleak
Published Jan 29, 2016
·Updated
The EbmlElement::ReadCodedSizeValue function in libEBML before 1.3.3 allows context-dependent attackers to obtain sensitive information from process heap memory via a crafted length value in an EBML id, which triggers an invalid memory access.
Affected Software
1 affected component
Matroska Libebml<=1.3.2
Event History
Jan 29, 2016
CVE Published
via MITRE·07:00 PM
Data Sourced
via MITRE·07:00 PM
Description
Frequently Asked Questions
1
What is the severity of CVE-2015-8791?
CVE-2015-8791 is categorized as a medium severity vulnerability due to its potential for sensitive information leakage.
2
How do I fix CVE-2015-8791?
To fix CVE-2015-8791, you should upgrade to libEBML version 1.3.3 or later.
3
What type of vulnerability is CVE-2015-8791?
CVE-2015-8791 is a memory corruption vulnerability that allows attackers to access sensitive data.
4
Who is affected by CVE-2015-8791?
Users of libEBML versions prior to 1.3.3 are affected by CVE-2015-8791.
5
What systems are impacted by CVE-2015-8791?
CVE-2015-8791 impacts systems that utilize the libEBML library for parsing EBML files.