1686 matches found
CVE-2020-23904: Out-of-bounds Write
A stack buffer overflow in speexenc.c of Speex v1.2 allows attackers to cause a denial of service DoS via a crafted WAV file. NOTE: the vendor states "I cannot reproduce it" and it "is a demo program...
CVE-2020-23903: Divide By Zero
A Divide by Zero vulnerability in the function static int readsamples of Speex v1.2 allows attackers to cause a denial of service DoS via a crafted WAV file...
Huawei EulerOS: Security Advisory for libsndfile (EulerOS-SA-2021-2638)
The remote host is missing an update for the Huawei EulerOS SPDX-FileCopyrightText: 2021 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...
PT-2021-4889
Name of the Vulnerable Software and Affected Versions Adobe After Effects versions 18.4.1 and earlier Description The issue is related to a memory corruption vulnerability due to insecure handling of a malicious WAV file, potentially resulting in arbitrary code execution in the context of the...
PT-2021-4920
Name of the Vulnerable Software and Affected Versions Adobe After Effects versions 18.4.1 and earlier Description The issue is related to a memory corruption vulnerability due to insecure handling of a malicious WAV file, potentially resulting in arbitrary code execution in the context of the...
PT-2021-4866 · Adobe · Audition
Name of the Vulnerable Software and Affected Versions: Adobe Audition versions 14.4 and earlier Description: The issue is related to a memory corruption vulnerability when parsing a WAV file, potentially resulting in arbitrary code execution in the context of the current user. User interaction is...
PT-2021-4771
Name of the Vulnerable Software and Affected Versions Adobe Prelude versions 10.1 and earlier Description The issue is related to a memory corruption vulnerability due to insecure handling of a malicious WAV file. This could potentially result in arbitrary code execution in the context of the...
PT-2021-4900
Name of the Vulnerable Software and Affected Versions Adobe Prelude versions 10.1 and earlier Description The issue is related to a memory corruption vulnerability due to insecure handling of a malicious WAV file, potentially resulting in arbitrary code execution in the context of the current use...
Huawei EulerOS: Security Advisory for libsndfile (EulerOS-SA-2021-2592)
The remote host is missing an update for the Huawei EulerOS SPDX-FileCopyrightText: 2021 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...
EulerOS 2.0 SP3 : libsndfile (EulerOS-SA-2021-2592)
According to the versions of the libsndfile package installed, the EulerOS installation on the remote host is affected by the following vulnerabilities : - A heap buffer overflow vulnerability in msadpcmdecodeblock of libsndfile 1.0.30 allows attackers to execute arbitrary code via a crafted WAV...
Important: libsndfile
Issue Overview: A heap buffer overflow flaw was found in libsndfile. This flaw allows an attacker to execute arbitrary code via a crafted WAV file. The highest threat from this vulnerability is to confidentiality, integrity, as well as system availability. CVE-2021-3246 Affected Packages:...
Huawei EulerOS: Security Advisory for libsndfile (EulerOS-SA-2021-2505)
The remote host is missing an update for the Huawei EulerOS SPDX-FileCopyrightText: 2021 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...
EulerOS 2.0 SP5 : libsndfile (EulerOS-SA-2021-2505)
According to the versions of the libsndfile package installed, the EulerOS installation on the remote host is affected by the following vulnerabilities : - A heap buffer overflow vulnerability in msadpcmdecodeblock of libsndfile 1.0.30 allows attackers to execute arbitrary code via a crafted WAV...
SELA heap buffer overflow vulnerability
SELA is a lossless audio codec. a heap buffer overflow vulnerability exists in file::WavFile::writeToFile in wavfile.c in SELA 20200412 and earlier versions. No detailed vulnerability details are currently available...
CVE-2021-39552
An issue was discovered in sela through 20200412. file::WavFile::readFromFile in wavfile.c has a heap-based buffer overflow...
CVE-2021-39549
An issue was discovered in sela through 20200412. A NULL pointer dereference exists in the function file::WavFile::WavFile located in wavfile.c. It allows an attacker to cause Denial of Service...
CVE-2021-39544
An issue was discovered in sela through 20200412. file::WavFile::writeToFile in wavfile.c has a heap-based buffer overflow...
CVE-2021-39549
An issue was discovered in sela through 20200412. A NULL pointer dereference exists in the function file::WavFile::WavFile located in wavfile.c. It allows an attacker to cause Denial of Service...
