high7.5
CVE-2020-26797
Mediainfo before version 20.08 has a heap buffer overflow vulnerability via MediaInfoLib::File_Gxf::ChooseParser_ChannelGrouping.
Impact
Mediainfo before version 20.08 has a heap buffer overflow vulnerability via MediaInfoLib::File_Gxf::ChooseParser_ChannelGrouping.
Affected products
| Vendor | Product | Affected versions |
|---|---|---|
| Mediaarea | Mediainfo | before 20.08 |
| Fedoraproject | Fedora | Version 33 |
Weakness classification
References
- NVD record
- CVE.org record
- https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/WYI2372RLWYQVLSYD5PBI4YTXNMVDZCZ/
- https://sourceforge.net/p/mediainfo/bugs/1154/
- https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/WYI2372RLWYQVLSYD5PBI4YTXNMVDZCZ/
- https://sourceforge.net/p/mediainfo/bugs/1154/