Back Linuxsecurity

Ubuntu libEBML Critical Buffer Overflow Denial of Service USN-8746

Linuxsecurity •LinuxSecurity Advisories • September 10, 2026

Keep your Linux systems secure and up to date with practical patching guidance. Review Linux Patching Best Practices ×

libEBML could be made to crash if it received specially crafted input. Software Description: - libebml: library for the EBML format Details: It was discovered that libEBML incorrectly handled certain read and write operations. An attacker could possibly use this issue to cause a buffer overflow, resulting in a denial of service.

libEBML could be made to crash if it received specially crafted input.

Software Description:

- libebml: library for the EBML format

It was discovered that libEBML incorrectly handled certain read and write

operations. An attacker could possibly use this issue to cause a buffer

overflow, resulting in a denial of service.

The problem can be corrected by updating your system to the following package versions: Ubuntu 22.04 LTS libebml5 1.4.2-2ubuntu0.1~esm1 Available with Ubuntu Pro Ubuntu 20.04 LTS libebml4v5 1.3.10-1ubuntu0.1~esm1 Available with Ubuntu Pro Ubuntu 18.04 LTS libebml4v5 1.3.5-2ubuntu0.1+esm1 Available with Ubuntu Pro Ubuntu 16.04 LTS libebml4v5 1.3.3-1ubuntu0.1+esm1 Available with Ubuntu Pro In general, a standard system update will make all the necessary changes.

Ubuntu Security Notice USN-8746-1

Get the latest News and Insights

Get the latest Linux and open source security news straight to your inbox.

Linux Security - Your source for Top Linux News, Advisories, HOWTOs and Feature Releases

The full story

This article is one source in a clustered incident — the cluster page carries the summary, timeline and every other outlet covering it.

Critical Buffer Overflow in libEBML Affects Ubuntu Systems A critical vulnerability has been identified in the libEBML library, which incorrectly handles read and write operations. This flaw can lead to a buffer overflow, potentially causing a denial of service. Affected systems include Ubuntu 22.04 LTS, 20.04 LTS, 18.04 LTS, and 16.04 LTS, with specific package versions listed for updates. The vulnerability was discovered recently, and users are advised to apply standard system updates to mitigate the risk. Ubuntu Pro users have access to extended security maintenance for these packages. No specific CVE identifier was provided in the articles. The issue is considered serious but has not been reported as actively exploited in the wild. 2 sources 46

Extracted Entities

Ubuntu libEBML Critical Buffer Overflow Denial of Service USN-8746

The full story

Extracted Entities

Attack Types (1)

Companies (1)

CWE Weaknesses (2)

Platforms (1)