CVE-2019-11373: Medium severity MediaArea MediaInfo vulnerability
Published Apr 20, 2019
·Updated
An out-of-bounds read in FileAnalyze::GetL8 in FileAnalyzeBuffer.cpp in MediaInfoLib in MediaArea MediaInfo 18.12 leads to a crash.
Affected Software
5 affected componentsFixes available
MediaArea MediaInfo=18.12
Fedoraproject Fedora=28
Fedoraproject Fedora=29
Fedoraproject Fedora=30
debian/libmediainfo
20.09+dfsg-223.04+dfsg-125.04+dfsg-126.01+dfsg-1
Remediation
Patch Available
Event History
Apr 20, 2019
CVE Published
via MITRE·02:05 PM
Data Sourced
via MITRE·02:05 PM
Description
Data Sourced
via NVD·03:29 PM
RemedyDescriptionSeverityWeaknessAffected Software
Feb 20, 2026
Data Sourced
via Ubuntu·10:22 PM
RemedyDescriptionSeverityAffected Software
Data Sourced
via Launchpad·10:23 PM
Description
Data Sourced
via Debian·10:23 PM
DescriptionAffected Software
Frequently Asked Questions
1
What is CVE-2019-11373?
CVE-2019-11373 is a vulnerability that leads to an out-of-bounds read in MediaInfoLib in MediaArea MediaInfo 18.12, causing a crash.
2
What is the severity of CVE-2019-11373?
The severity of CVE-2019-11373 is medium with a CVSS score of 6.5.
3
How does CVE-2019-11373 affect MediaInfo?
CVE-2019-11373 affects MediaInfo version 18.12.
4
How do I fix CVE-2019-11373 on Debian?
To fix CVE-2019-11373 on Debian, update the libmediainfo package to version 18.12-2 or newer.
5
How do I fix CVE-2019-11373 on Ubuntu?
To fix CVE-2019-11373 on Ubuntu, update the libmediainfo package to the specified versions provided in the advisory.