LG ASFParser::ParseHeaderExtensionObjects Missing Bounds Check

Discussion in 'News Aggregator' started by Packet Storm, 13 Jun 2017.

  1. Packet Storm

    Packet Storm Guest

    LG has a memcpy in ASFParser::parseHeaderExtensionObjects that does not check that the size of the copy is smaller than the size of the source buffer, resulting in an out-of-bounds heap read.

    Continue reading...
     
    #1 Packet Storm, 13 Jun 2017
(You must log in or sign up to post here.)

Share This Page

Loading...