Lucene search

K

MitreCVELIST:CVE-2024-33430

HistoryMay 01, 2024 - 12:00 a.m.

CVE-2024-33430

2024-05-0100:00:00

mitre

www.cve.org

phiola v2.0-rc22

pcm_convert.h:513

remote code execution

crafted .wav file

cve-2024-33430

7.7 High

AI Score

Confidence

High

0.0004 Low

EPSS

Percentile

10.4%

An issue in phiola/src/afilter/pcm_convert.h:513 of phiola v2.0-rc22 allows a remote attacker to execute arbitrary code via the a crafted .wav file.

References

github.com/Helson-S/FuzzyTesting/blob/master/phiola/segmentFault-1/poc/I2ZFI3~5

github.com/Helson-S/FuzzyTesting/blob/master/phiola/segmentFault-1/segmentFault-1.assets/image-20240420011601263.png

github.com/Helson-S/FuzzyTesting/blob/master/phiola/segmentFault-1/segmentFault-1.md

github.com/Helson-S/FuzzyTesting/tree/master/phiola/segmentFault-1

github.com/Helson-S/FuzzyTesting/tree/master/phiola/segmentFault-1/poc

github.com/stsaz/phiola/

github.com/stsaz/phiola/issues/28

7.7 High

AI Score

Confidence

High

0.0004 Low

EPSS

Percentile

10.4%

Related for CVELIST:CVE-2024-33430