LG ASFParser::ParseHeaderExtensionObjects Missing Bounds Check
Posted by deepcore on June 14, 2017 – 4:15 pm
LG has a memcpy in ASFParser::ParseHeaderExtensionObjects that does not check that the size of the copy is smaller than the size of the source buffer, resulting in an out-of-bounds heap read.
Post a reply
You must be logged in to post a comment.