CVE-2015-8791: Matroska Libebml

Medium severity, CVSS 4.3. EPSS: 1.3% chance of exploitation in the next 30 days.

The EbmlElement::ReadCodedSizeValue function in libEBML before 1.3.3 allows context-dependent attackers to obtain sensitive information from process heap memory via a crafted length value in an EBML id, which triggers an invalid memory access.

Affected products

• Matroska Libebml: up to and including 1.3.2

Published 2016-01-29. Last modified 2026-06-17.