CVE-2023-36243
HighCVSS 7.8Exploitation Probability (EPSS)
Low risk20th percentile - higher than 20% of all known CVEs
Summary
FLVMeta v1.2.1 was found to contain a buffer overflow in the xml_on_metadata_tag_only function at dump_xml.c.
Risk Assessment
Buffer overflow may lead to arbitrary code execution, posing a significant security risk to the system.
Recommendation
It is recommended to update to the latest version of FLVMeta to mitigate this vulnerability.
Other vulnerabilities in FLVMeta v1.2.1
See all- CVE-2026-82821Medium
A vulnerability was found in FLVMeta up to 1.2.2 in the function amf_object_get in src/amf.c during AMF object parsing. The manipulation causes a null pointer dereference. The attack can be initiated remotely, and the exploit has been publicly disclosed.
- CVE-2026-82820Medium
A vulnerability was found in FLVMeta up to 1.2.2 in the function amf_string_new in src/amf.c during AMF string processing. Manipulation of the length argument results in a heap-based buffer overflow. The attack can be launched remotely, and the exploit has been made public.
Original NVD description (English source)
FLVMeta v1.2.1 was discovered to contain a buffer overflow via the xml_on_metadata_tag_only function at dump_xml.c.