Approved changes feed: RSS · Atom

cpe:2.3:a:matroska:libebml:*:*:*:*:*:*:*:*

part: a version: * update: *

VendorMatroska (83ede7e2-6181-55bc-b428-4c0784ed8738)
ProductLibebml (bbea1ecf-f252-528f-b985-65aed11ac9bc)
Edition*
Language*
Software edition*
Target software*
Target hardware*
Other*
NotesImported from purl2cpe mapping

PURL mappings

PURLSourceLast updated
pkg:github/matroska-org/libebml purl2cpe 2026-06-01 10:11:10.629834
pkg:rpm/fedora/libebml purl2cpe 2026-06-01 10:11:10.629837
pkg:rpm/opensuse/libebml purl2cpe 2026-06-01 10:11:10.629839

Vulnerability references

IdentifiercpeApplicabilitySubmitteddb.gcve.eu detailsRationale
CVE:CVE-2023-52339 vulnerable 2026-06-08 06:17:54.871985 Details available
In libebml before 1.4.5, an integer overflow in MemIOCallback.cpp can occur when reading or writing. It may result in buffer overflows.
Published: 2024-01-12T00:00:00.000Z
Updated: 2025-11-04T22:05:33.118Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2021-3405 vulnerable 2026-06-08 05:33:51.268726 Details available
A flaw was found in libebml before 1.4.2. A heap overflow bug exists in the implementation of EbmlString::ReadData and EbmlUnicodeString::ReadData in libebml.
Published: 2021-02-23T19:05:27.000Z
Updated: 2024-08-03T16:53:17.531Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2015-8791 vulnerable 2026-06-08 05:07:04.913956 Details available
The EbmlElement::ReadCodedSizeValue function in libEBML before 1.3.3 allows context-dependent attackers to obtain sensitive information from process heap memory via a crafted length value in an EBML id, which triggers an invalid memory access.
Published: 2016-01-29T19:00:00.000Z
Updated: 2024-08-06T08:29:22.061Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2015-8790 vulnerable 2026-06-08 05:07:04.913581 Details available
The EbmlUnicodeString::UpdateFromUTF8 function in libEBML before 1.3.3 allows context-dependent attackers to obtain sensitive information from process heap memory via a crafted UTF-8 string, which triggers an invalid memory access.
Published: 2016-01-29T19:00:00.000Z
Updated: 2024-08-06T08:29:22.019Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2015-8789 vulnerable 2026-06-08 05:07:04.913084 Details available
Use-after-free vulnerability in the EbmlMaster::Read function in libEBML before 1.3.3 allows context-dependent attackers to have unspecified impact via a "deeply nested element with infinite size" followed by another element of an upper level in an EBML document.
Published: 2016-01-29T19:00:00.000Z
Updated: 2024-08-06T08:29:22.017Z
Reference links
Imported from gcve-enriched-dumps CVE data

Contribute

You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.