CVE-2022-27824

Name of the Vulnerable Software and Affected Versions libsapeextractor library versions prior to SMR Apr-2022 Release 1

Description The issue is related to an improper size check in the sapefd parse meta DESCRIPTION function, which allows for an out of bounds read via a crafted media file.

Recommendations For versions prior to SMR Apr-2022 Release 1, update to SMR Apr-2022 Release 1 or later to resolve the issue. As a temporary workaround, consider restricting the use of the sapefd parse meta DESCRIPTION function until a patch is available.