← Back

Mediainfo

mediainfo

Vendor: Mediaarea • 4 CVEs

CVEs (4)

CVE
VENDORS
PRODUCTS
UPDATED
PUBLISHED
CVSS
CVE-2020-26797
2Fedoraproject
Mediaarea
2Fedora
Mediainfo
Jun 17, 2026
Mar 18, 2021
N/A· v4
7.5 HIGH· v3
5.0 MEDIUM· v2
Mediainfo before version 20.08 has a heap buffer overflow vulnerability via MediaInfoLib::File_Gxf::ChooseParser_ChannelGrouping.
CVE-2020-15395
2Fedoraproject
Mediaarea
2Fedora
Mediainfo
Jun 17, 2026
Jun 30, 2020
N/A· v4
7.8 HIGH· v3
6.8 MEDIUM· v2
In MediaInfoLib in MediaArea MediaInfo 20.03, there is a stack-based buffer over-read in Streams_Fill_PerStream in Multiple/File_MpegPs.cpp (aka an off-by-one during MpegPs parsing).
CVE-2019-11373
2Fedoraproject
Mediaarea
2Fedora
Mediainfo
Jun 17, 2026
Apr 20, 2019
N/A· v4
6.5 MEDIUM· v3
4.3 MEDIUM· v2
An out-of-bounds read in File__Analyze::Get_L8 in File__Analyze_Buffer.cpp in MediaInfoLib in MediaArea MediaInfo 18.12 leads to a crash.
CVE-2019-11372
2Fedoraproject
Mediaarea
2Fedora
Mediainfo
Jun 17, 2026
Apr 20, 2019
N/A· v4
6.5 MEDIUM· v3
4.3 MEDIUM· v2
An out-of-bounds read in MediaInfoLib::File__Tags_Helper::Synched_Test in Tag/File__Tags.cpp in MediaInfoLib in MediaArea MediaInfo 18.12 leads to a crash.