Global Out-of-Bounds Read in libaribcaption

Executive Summary

This vulnerability is a global out-of-bounds read in libaribcaption versions 1.1.0 through 1.1.2. It occurs in the DecoderImpl::HandleGLGR() function when processing crafted captions with specific byte sequences (ESC 28 4C followed by bytes 0x6F-0x7E). The issue allows reading past a fixed-size table without proper bounds checking, potentially leaking adjacent read-only memory or causing crashes.

Useful 0 Not Useful 0

Detection Guidance

This vulnerability involves a global out-of-bounds read in libaribcaption versions 1.1.0 through 1.1.2. Detection requires checking the installed version of libaribcaption. Use commands like 'dpkg -l libaribcaption' on Debian-based systems or 'rpm -qa | grep libaribcaption' on RPM-based systems to verify the version.

Useful 0 Not Useful 0

Impact Analysis

An attacker could exploit this to crash the application using libaribcaption or leak sensitive memory data. Since the flaw involves crafted captions, users processing untrusted media files with captions may be affected. The impact is limited to local or user-interactive scenarios due to the access vector requirements.

Useful 0 Not Useful 0

Compliance Impact

This vulnerability does not directly affect compliance with GDPR or HIPAA. It is a memory safety issue in a caption decoder library that could lead to information disclosure or crashes. Compliance impacts would depend on how the affected library is used in a system processing sensitive data.

Useful 0 Not Useful 0

Mitigation Strategies

Immediately upgrade libaribcaption to a version outside the affected range (1.1.0-1.1.2). If upgrading is not possible, consider disabling caption processing in applications using libaribcaption or applying vendor patches if available.

Useful 0 Not Useful 0