EUVD-2021-27919

Malicious code in bioql PyPI...

EUVD-2023-51578

Malicious code in bioql PyPI...

EUVD-2025-22465

Malicious code in bioql PyPI...

Linux Distros Unpatched Vulnerability : CVE-2017-16868

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - In SWFTools 0.9.2, the wavconvert2mono function in lib/wav.c does not properly restrict a multiplication within a malloc call, which allows remote attackers to...

Linux Distros Unpatched Vulnerability : CVE-2017-11099

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - When SWFTools 0.9.2 processes a crafted file in wav2swf, it can lead to a Segmentation Violation in the wavconvert2mono function in lib/wav.c. CVE-2017-11099 No...

Low: taglib

Issue Overview: TagLib before 2.0 allows a segmentation violation and application crash during tag writing via a crafted WAV file in which an id3 chunk is the only valid chunk. CVE-2023-47466 Affected Packages: taglib Issue Correction: Run dnf update taglib --releasever 2023.8.20250908 or dnf...

Amazon Linux 2023 : taglib, taglib-devel (ALAS2023-2025-1174)

It is, therefore, affected by a vulnerability as referenced in the ALAS2023-2025-1174 advisory. TagLib before 2.0 allows a segmentation violation and application crash during tag writing via a crafted WAV file in which an id3 chunk is the only valid chunk. CVE-2023-47466 Tenable has extracted the...

Low: vorbis-tools

Issue Overview: Buffer Overflow vulnerability in Vorbis-tools v.1.4.2 allows a local attacker to execute arbitrary code and cause a denial of service during the conversion of wav files to ogg files. CVE-2023-43361 Affected Packages: vorbis-tools Note: This advisory is applicable to Amazon Linux 2...

Linux Distros Unpatched Vulnerability : CVE-2017-15266

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - In GNU Libextractor 1.4, there is a Divide-By-Zero in EXTRACTORwavextractmethod in wavextractor.c via a zero sample rate. CVE-2017-15266 Note that Nessus relies...

Linux Distros Unpatched Vulnerability : CVE-2023-47466

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - TagLib before 2.0 allows a segmentation violation and application crash during tag writing via a crafted WAV file in which an id3 chunk is the only valid chunk...

Linux Distros Unpatched Vulnerability : CVE-2017-9129

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - The wavopenread function in frontend/input.c in Freeware Advanced Audio Coder FAAC 1.28 allows remote attackers to cause a denial of service large loop via a...

Linux Distros Unpatched Vulnerability : CVE-2017-18207

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - The Waveread.readfmtchunk function in Lib/wave.py in Python through 3.6.4 does not ensure a nonzero channel value, which allows attackers to cause a denial of...

Linux Distros Unpatched Vulnerability : CVE-2023-43361

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - Buffer Overflow vulnerability in Vorbis-tools v.1.4.2 allows a local attacker to execute arbitrary code and cause a denial of service during the conversion of w...

vlc:vlc-demux-dec-libfuzzer-wav: Heap-buffer-overflow in Open

Project: https://github.com/videolan/vlc.git Detailed Report: https://oss-fuzz.com/testcase?key=4604660222853120 Project: vlc Fuzzing Engine: libFuzzer Fuzz Target: vlc-demux-dec-libfuzzer-wav Job Type: libfuzzerasanvlc Platform Id: linux Crash Type: Heap-buffer-overflow READ 7 Crash Address:...

CVE-2025-47187

A vulnerability in the Mitel 6800 Series, 6900 Series, and 6900w Series SIP Phones through 6.4 SP4 R6.4.0.4006, and the 6970 Conference Unit through 6.4 SP4 R6.4.0.4006 or version V1 R0.1.0, could allow an unauthenticated attacker to perform a file upload attack due to missing authentication...

CVE-2025-47187

A vulnerability in Mitel 6800 Series , 6900 Series , and 6900w Series SIP Phones (through version 6.4 SP4 ) and the 6970 Conference Unit (through 6.4 SP4 or V1 R0.1.0 ) allows an unauthenticated attacker to perform a file upload attack . The root cause is a lack of authentication mechanisms , whi...

Security update for gstreamer-plugins-good

This update for gstreamer-plugins-good fixes the following issues: CVE-2024-47540: Fixed an uninitialized stack memory in Matroska/WebM demuxer. boo1234421 CVE-2024-47537: Fixed an out-of-bounds write in isomp4/qtdemux.c. boo1234414 CVE-2024-47543: Fixed an out-of-bounds write in...

SUSE-SU-2025:00063-1 Security update for gstreamer-plugins-good

This update for gstreamer-plugins-good fixes the following issues: - CVE-2024-47540: Fixed an uninitialized stack memory in Matroska/WebM demuxer. boo1234421 - CVE-2024-47537: Fixed an out-of-bounds write in isomp4/qtdemux.c. boo1234414 - CVE-2024-47543: Fixed an out-of-bounds write in...

Security update for gstreamer-plugins-good

This update for gstreamer-plugins-good fixes the following issues: CVE-2024-47537: Fixed OOB-write in isomp4/qtdemux.c bsc1234414 CVE-2024-47539: Fixed OOB-write in converttos3341a bsc1234417 CVE-2024-47540: Fixed uninitialized stack memory in Matroska/WebM demuxer bsc1234421 CVE-2024-47543: Fixe...

PT-2025-26232 · Swftools · Swftools

Name of the Vulnerable Software and Affected Versions: swftools versions up to 0.9.2 Description: A vulnerability was found in swftools, affecting the function wav convert2mono in the library lib/wav.c of the component wav2swf. The manipulation leads to out-of-bounds read. The attack needs to be...