CVE-2021-3405

A flaw was found in libebml before 1.4.2. A heap overflow bug exists in the implementation of EbmlString::ReadData and EbmlUnicodeString::ReadData in libebml.

References

Affected packages

Git / github.com/matroska-org/libebml

Affected ranges

Type: GIT
Repo: https://github.com/matroska-org/libebml
Events: Introduced

0 Unknown introduced commit / All previous commits are affected

Fixed

6c59e5e1ce0087e4465f6d3f479449d3f6bcb167

Affected versions

release-1.*

release-1.3.0

release-1.3.1

release-1.3.10

release-1.3.2

release-1.3.3

release-1.3.4

release-1.3.5

release-1.3.6

release-1.3.7

release-1.3.8

release-1.3.9

release-1.4.0

release-1.4.1

Database specific

vanir_signatures

[
    {
        "digest": {
            "threshold": 0.9,
            "line_hashes": [
                "48377290074949130495164895076365827608",
                "316359439968302076612153081825500800864"
            ]
        },
        "source": "https://github.com/matroska-org/libebml/commit/6c59e5e1ce0087e4465f6d3f479449d3f6bcb167",
        "deprecated": false,
        "target": {
            "file": "src/EbmlVersion.cpp"
        },
        "id": "CVE-2021-3405-de8843e5",
        "signature_version": "v1",
        "signature_type": "Line"
    }
]