CVE-2015-8791

CVE-2015-8791 is a heap information disclosure vulnerability affecting libEBML before version 1.3.3, including products like matroska. An attacker can exploit this by crafting a malicious EBML id with a specific length value, leading to an invalid memory access and potential disclosure of sensitive process heap memory. With a CVSS score of 4.3 (Medium), this vulnerability requires user interaction (UI:R) and network access (AV:N) for exploitation, primarily impacting confidentiality (C:L). There is no evidence of active exploitation, public exploit code (Metasploit, Nuclei, ExploitDB), or significant community discussion or media coverage, indicating a low current threat level.