CVE-2024-37017

asdcplib (aka AS-DCP Lib) 2.13.1 has a heap-based buffer over-read in ASDCP::TimedText::MXFReader::h__Reader::MD_to_TimedText_TDesc in AS_DCP_TimedText.cpp in libasdcp.so.
Configurations

No configuration.

History

03 Jul 2024, 02:04

Type Values Removed Values Added
Summary
  • (es) asdcplib (también conocido como AS-DCP Lib) 2.13.1 tiene un búfer basado en montón sobreleído en ASDCP::TimedText::MXFReader::h__Reader::MD_to_TimedText_TDesc en AS_DCP_TimedText.cpp en libasdcp.so.
CWE CWE-120
CVSS v2 : unknown
v3 : unknown
v2 : unknown
v3 : 8.1

31 May 2024, 00:15

Type Values Removed Values Added
New CVE

Information

Published : 2024-05-31 00:15

Updated : 2024-07-03 02:04


NVD link : CVE-2024-37017

Mitre link : CVE-2024-37017

CVE.ORG link : CVE-2024-37017


JSON object : View

Products Affected

No product.

CWE
CWE-120

Buffer Copy without Checking Size of Input ('Classic Buffer Overflow')