CVE-2022-28786

Name of the Vulnerable Software and Affected Versions aviextractor library versions prior to SMR May-2022 Release 1

Description The issue is caused by improper buffer size check logic in the aviextractor library, allowing out of bounds read and potentially leading to temporary denial of service. The patch for this issue adds buffer size check logic to prevent such occurrences.

Recommendations For versions prior to SMR May-2022 Release 1, update to SMR May-2022 Release 1 or later to resolve the issue. As a temporary workaround, consider implementing additional buffer size checks to prevent out of bounds reads until the patch can be applied.