CVE-2022-27825

Name of the Vulnerable Software and Affected Versions libsapeextractor library versions prior to SMR Apr-2022 Release 1

Description The issue is related to an improper size check in the sapefd parse meta HEADER function, which allows for an out of bounds read. This can be triggered by a crafted media file.

Recommendations For versions prior to SMR Apr-2022 Release 1, update to SMR Apr-2022 Release 1 or later to resolve the issue. As a temporary workaround, consider restricting the use of the sapefd parse meta HEADER function until a patch is available. Avoid using the libsapeextractor library with untrusted media files until the issue is resolved.