CVE-2020-15395: High severity mediainfo vulnerability
Published Jun 30, 2020
·Updated
In MediaInfoLib in MediaArea MediaInfo 20.03, there is a stack-based buffer over-read in StreamsFillPerStream in Multiple/FileMpegPs.cpp (aka an off-by-one during MpegPs parsing).
Affected Software
2 affected components
MediaArea MediaInfo=20.03
Fedoraproject Fedora=32
Event History
Jun 30, 2020
CVE Published
via MITRE·10:25 AM
Data Sourced
via MITRE·10:25 AM
Description
Frequently Asked Questions
1
What is CVE-2020-15395?
CVE-2020-15395 is a vulnerability in MediaInfoLib in MediaArea MediaInfo 20.03, which allows for a stack-based buffer over-read in the MpegPs parsing.
2
What is the severity of CVE-2020-15395?
CVE-2020-15395 has a severity rating of 7.8 (high).
3
How does CVE-2020-15395 affect MediaArea MediaInfo?
CVE-2020-15395 affects MediaArea MediaInfo version 20.03, allowing for a stack-based buffer over-read.
4
How does CVE-2020-15395 impact Fedora 32?
CVE-2020-15395 impacts Fedora 32 as it includes the affected version of MediaArea MediaInfo.
5
How can CVE-2020-15395 be fixed?
CVE-2020-15395 can be fixed by updating MediaArea MediaInfo to a version that addresses the vulnerability.