Product:
MPEG-DASH
Summary
When calculating the content path in handling MPEG-DASH manifests, an out-of-bounds NUL-byte write occurs one byte past the end of the buffer. This happens when the last byte in the buffer is not a ‘/’ and a NUL byte is appended in-place, leading to a potential buffer overflow. It is recommended to upgrade to version 8.0 or beyond to mitigate this issue.
Details
| Severity | Base Score | CVE |
|---|---|---|
| HIGH | 8.7 | CVE-2025-59728 |
Exploitation
To exploit this vulnerability, an attacker can craft a specially formatted MPEG-DASH manifest that triggers the out-of-bounds write. By ensuring that the last byte of the buffer is not a ‘/’, the attacker can manipulate the buffer to write beyond its allocated size, potentially leading to arbitrary code execution or data corruption.
Affected Products
- MPEG-DASH: Vulnerable to out-of-bounds write when handling manifests, leading to potential security risks.
Mitigation
Upgrading to version 8.0 or beyond is the recommended mitigation to address this vulnerability. This update will ensure that the buffer handling is corrected, preventing the out-of-bounds write and enhancing overall security.