1 result · Feed
-
Medium 6.5
Memory exhaustion when parsing a crafted `iloc` box
`heifer-isobmff` read the item and extent counts of the `iloc` box (item locations) from the file and allocated memory for them before checking that the box was large enough to hold that many entries. Extents that declare no field at all take zero bytes each,…