CVE-2020-21723

EPSS 0.4%CWE-787

Vexday Risk Score

3Low

SSVC decision (CISA)

Track

No exploitation signal → monitor

CVSS —EPSS 0.4%KEV nãoPoC —Nuclei —Metasploit —Patch —

Lifecycle

22 Aug 2023Published on NVD

Recommendation: Monitor — no exploitation signal at the moment.

A Segmentation Fault issue discovered StreamSerializer::extractStreams function in streamSerializer.cpp in oggvideotools 0.9.1 allows remote attackers to cause a denial of service (crash) via opening of crafted ogg file.

Affected products

n/a · n/a

References

https://github.com/xiaoxiongwang/security/tree/master/oggvideotools#segv-occurs-in-function-streamserializerextractstreams-in-streamserializercpp https://sourceforge.net/p/oggvideotools/bugs/10/