Medium severity6.5OSV Advisory· Published Apr 20, 2019· Updated Jun 17, 2026
CVE-2019-11372
CVE-2019-11372
Description
An out-of-bounds read in MediaInfoLib::File__Tags_Helper::Synched_Test in Tag/File__Tags.cpp in MediaInfoLib in MediaArea MediaInfo 18.12 leads to a crash.
AI Insight
LLM-synthesized narrative grounded in this CVE's description and references.
Affected products
6v0.7.74, v0.7.76, v0.7.78, …+ 1 more
- (no CPE)range: v0.7.74, v0.7.76, v0.7.78, …
- (no CPE)range: = 18.12
- Range: = 18.12
- osv-coords3 versionspkg:rpm/opensuse/libmediainfo&distro=openSUSE%20Leap%2015.0pkg:rpm/suse/libmediainfo&distro=SUSE%20Package%20Hub%2015pkg:rpm/suse/libmediainfo&distro=SUSE%20Package%20Hub%2015%20SP1
< 18.03-bp150.3.3.1+ 2 more
- (no CPE)range: < 18.03-bp150.3.3.1
- (no CPE)range: < 18.03-bp150.3.3.1
- (no CPE)range: < 18.03-bp151.4.3.2
Patches
Vulnerability mechanics
References
12- github.com/MediaArea/MediaInfoLib/pull/1111nvdPatchThird Party Advisory
- sourceforge.net/p/mediainfo/bugs/1101/nvdExploitThird Party Advisory
- lists.opensuse.org/opensuse-security-announce/2019-06/msg00069.htmlnvd
- lists.opensuse.org/opensuse-security-announce/2019-06/msg00083.htmlnvd
- lists.opensuse.org/opensuse-security-announce/2019-08/msg00028.htmlnvd
- lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/B752JY7TABWSVYHFATD37XDD6PVIO5C6/nvd
- lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/BC4Z4BGGMSSVTRKVD3OCW4JLH3K2ZNGP/nvd
- lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/BYKBAXS35KFMU4YLO37VGDIKHEL5HSPO/nvd
- lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/NJYASICJ2VUUNGHDBB62FGYQN2SNITM5/nvd
- lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/XOA4AWTRLWVQBZZAKXXQHP7M2NK6CB3Z/nvd
- lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/XYF5I42OBJR7HKJD2OFS6LP26I52IT3M/nvd
- usn.ubuntu.com/3988-1/nvd
News mentions
0No linked articles in our index yet.