Логотип exploitDog
Консоль
Логотип exploitDog

exploitDog

github логотип

GHSA-cjcp-vc46-rm2h

Опубликовано: 06 апр. 2026
Источник: github
Github: Не прошло ревью
CVSS3: 5.6

Описание

A flaw was found in libtheora. This heap-based out-of-bounds read vulnerability exists within the AVI (Audio Video Interleave) parser, specifically in the avi_parse_input_file() function. A local attacker could exploit this by tricking a user into opening a specially crafted AVI file containing a truncated header sub-chunk. This could lead to a denial-of-service (application crash) or potentially leak sensitive information from the heap.

A flaw was found in libtheora. This heap-based out-of-bounds read vulnerability exists within the AVI (Audio Video Interleave) parser, specifically in the avi_parse_input_file() function. A local attacker could exploit this by tricking a user into opening a specially crafted AVI file containing a truncated header sub-chunk. This could lead to a denial-of-service (application crash) or potentially leak sensitive information from the heap.

EPSS

Процентиль: 2%
0.00012
Низкий

5.6 Medium

CVSS3

Дефекты

CWE-125

Связанные уязвимости

CVSS3: 5.6
ubuntu
8 дней назад

A flaw was found in libtheora. This heap-based out-of-bounds read vulnerability exists within the AVI (Audio Video Interleave) parser, specifically in the avi_parse_input_file() function. A local attacker could exploit this by tricking a user into opening a specially crafted AVI file containing a truncated header sub-chunk. This could lead to a denial-of-service (application crash) or potentially leak sensitive information from the heap.

CVSS3: 5.6
redhat
8 дней назад

A flaw was found in libtheora. This heap-based out-of-bounds read vulnerability exists within the AVI (Audio Video Interleave) parser, specifically in the avi_parse_input_file() function. A local attacker could exploit this by tricking a user into opening a specially crafted AVI file containing a truncated header sub-chunk. This could lead to a denial-of-service (application crash) or potentially leak sensitive information from the heap.

CVSS3: 5.6
nvd
8 дней назад

A flaw was found in libtheora. This heap-based out-of-bounds read vulnerability exists within the AVI (Audio Video Interleave) parser, specifically in the avi_parse_input_file() function. A local attacker could exploit this by tricking a user into opening a specially crafted AVI file containing a truncated header sub-chunk. This could lead to a denial-of-service (application crash) or potentially leak sensitive information from the heap.

CVSS3: 5.6
debian
8 дней назад

A flaw was found in libtheora. This heap-based out-of-bounds read vuln ...

EPSS

Процентиль: 2%
0.00012
Низкий

5.6 Medium

CVSS3

Дефекты

CWE-125