CVE-2015-8789

Critical

Published: 29/01/2016(UTC)Translated: 15/06/2026(UTC)NVD NIST

Summary

CVE-2015-8789 is a use-after-free vulnerability in the EbmlMaster::Read function in libEBML before version 1.3.3. It allows context-dependent attackers to have unspecified impact via a 'deeply nested element with infinite size' followed by another upper-level element in an EBML document.

Risk Assessment

This vulnerability may lead to unpredictable consequences in applications using libEBML, potentially compromising data integrity and system security.

Recommendation

It is recommended to update libEBML to version 1.3.3 or later to mitigate this vulnerability and reduce the risk of attacks.

Original NVD description (English source)

Use-after-free vulnerability in the EbmlMaster::Read function in libEBML before 1.3.3 allows context-dependent attackers to have unspecified impact via a "deeply nested element with infinite size" followed by another element of an upper level in an EBML document.