CVE-2020-15395: In MediaInfoLib in MediaArea MediaInfo 20.03, there is a stack-based buffer over-read in Streams_Fill_PerStream in Multiple/File_MpegPs.cpp (aka an off-by-one during MpegPs parsing). Looks like no patch yet.
Unable to check for sanity: > no match for package: media-video/libmediainfo-20.09
amd64 done
x86 stable
Please cleanup.
Unable to check for sanity: > no match for package: media-libs/libmediainfo-20.09
Apparently I cleaned up.
GLSA vote: no