CVE-2021-35346

tsMuxer v2.6.16 was discovered to contain a heap-based buffer overflow via the function HevcSpsUnit::short_term_ref_pic_set(int) in hevc.cpp

published December 3, 2021

CVSS
—
EPSS
2%
Percentile
78.7
In the wild
Unconfirmed
What it is

⚠️ A heap-based buffer overflow in tsMuxer v2.6.16 could lead to some unexpected surprises! This vulnerability lurks in the HevcSpsUnit::short_term_ref_pic_set function. 🔥 Think of this as a cluttered garage where a little too much junk is stuffed onto the shelves. If you add just one more box, the whole shelf could collapse, causing a domino effect that could wreak havoc throughout the space! If exploited, this vulnerability could allow an attacker to manipulate memory, potentially leading to arbitrary code execution or crashing the application. The consequences could be damaging, with the potential for data corruption or unauthorized actions.

Put simply

Think of this as a cluttered garage where a little too much junk is stuffed onto the shelves. If you add just one more box, the whole shelf could collapse, causing a domino effect that could wreak havoc throughout the space! This vulnerability arises from a heap-based buffer overflow in the HevcSpsUnit::short_term_ref_pic_set(int) function, allowing attackers to write outside the expected memory bounds, which can be misused for malicious purposes.

What to do

If exploited, this vulnerability could allow an attacker to manipulate memory, potentially leading to arbitrary code execution or crashing the application. The consequences could be damaging, with the potential for data corruption or unauthorized actions. To mitigate this vulnerability, developers should update to the latest version of tsMuxer as soon as possible. It's also wise to conduct thorough testing to identify any other potential memory management issues in the code. You've got this! By staying proactive and vigilant, you can keep your software safe and sound. 🛡️

The record
Technical detail
CVSS
Not scored
CVSS v4.0
Not supplied
EPSS
0.01832 · 78.7th percentile
Published
2021-12-03T19:36Z
EPSS history
Timeline
  • 03 DEC 19:36Z
    tsMuxer v2.6.16 was discovered to contain a heap-based buffer overflow via the function HevcSpsUnit::short_term_ref_pic_set(int) in hevc.cpp
    cvelistv5