CVE-2015-8790: Matroska Libebml

Medium severity, CVSS 4.3. EPSS: 1.8% chance of exploitation in the next 30 days.

The EbmlUnicodeString::UpdateFromUTF8 function in libEBML before 1.3.3 allows context-dependent attackers to obtain sensitive information from process heap memory via a crafted UTF-8 string, which triggers an invalid memory access.

Affected products

• Matroska Libebml: up to and including 1.3.2

Published 2016-01-29. Last modified 2026-06-17.