Approved changes feed: RSS · Atom

cpe:2.3:a:mediaarea:mediainfo:20.03:*:*:*:*:*:*:*

part: a version: 20.03 update: *

VendorMediaarea (67b5ffa9-74eb-5033-a13a-c577c9dc2b92)
ProductMediainfo (273086ac-d245-5f72-a89d-af0c80ba31d3)
Edition*
Language*
Software edition*
Target software*
Target hardware*
Other*
NotesImported from NVD CPE 2.0 feed

PURL mappings

PURLSourceLast updated
pkg:deb/debian/mediainfo purl2cpe 2026-06-01 10:13:43.021562
pkg:deb/ubuntu/mediainfo purl2cpe 2026-06-01 10:13:43.021564
pkg:docker/jlesage/mediainfo purl2cpe 2026-06-01 10:13:43.021565
pkg:github/mediaarea/mediainfo purl2cpe 2026-06-01 10:13:43.021566
pkg:nuget/MediaInfo.Native purl2cpe 2026-06-01 10:13:43.021567
pkg:rpm/fedora/mediainfo purl2cpe 2026-06-01 10:13:43.021569
pkg:rpm/opensuse/mediainfo purl2cpe 2026-06-01 10:13:43.021570
pkg:sourceforge/mediainfo purl2cpe 2026-06-01 10:13:43.021572

Vulnerability references

IdentifiercpeApplicabilitySubmitteddb.gcve.eu detailsRationale
CVE:CVE-2020-15395 vulnerable 2026-06-08 05:19:25.872675 Details available
In MediaInfoLib in MediaArea MediaInfo 20.03, there is a stack-based buffer over-read in Streams_Fill_PerStream in Multiple/File_MpegPs.cpp (aka an off-by-one during MpegPs parsing).
Published: 2020-06-30T10:25:46.000Z
Updated: 2024-08-04T13:15:20.528Z
Reference links
Imported from gcve-enriched-dumps CVE data

Contribute

You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.