libebml: Heap buffer overflow vulnerability

libebml: Heap buffer overflow vulnerability A heap-based buffer overflow in libeml might allow attackers to execute arbitrary code. libebml 2022-08-14 2022-08-14 772272 remote 1.4.2 1.4.2

libebml is a C++ library to parse EBML files.

On 32bit builds of libebml, the length of a string is miscalculated, potentially leading to an exploitable heap overflow.

An attacker able to provide arbitrary input to libebml could achieve arbitrary code execution.

There is no known workaround at this time.

Users of libebml on 32 bit architectures should upgrade to the latest version:


          # emerge --sync
          # emerge --ask --oneshot --verbose ">=dev-libs/libebml-1.4.2"

CVE-2021-3405 ajak ajak