1686 matches found
CVE-2021-3246
A heap buffer overflow vulnerability in msadpcmdecodeblock of libsndfile 1.0.30 allows attackers to execute arbitrary code via a crafted WAV file...
CVE-2021-3246
CVE-2021-3246 describes a heap buffer overflow in libsndfile’s msadpcm_decode_block (v1.0.30) that can allow arbitrary code execution through a crafted WAV file. Multiple connected advisories confirm the vulnerable component and affected library (libsndfile) and show vendor advisories for various...
CVE-2021-3246
A heap buffer overflow vulnerability in msadpcmdecodeblock of libsndfile 1.0.30 allows attackers to execute arbitrary code via a crafted WAV file...
CVE-2021-3246: Out-of-bounds Write
A heap buffer overflow vulnerability in msadpcmdecodeblock of libsndfile 1.0.30 allows attackers to execute arbitrary code via a crafted WAV file...
CVE-2021-3246
A heap buffer overflow vulnerability in msadpcmdecodeblock of libsndfile 1.0.30 allows attackers to execute arbitrary code via a crafted WAV file...
PT-2021-7406 · Qualcomm · Qualcomm Snapdragon Mobile +5
Name of the Vulnerable Software and Affected Versions: Qualcomm Snapdragon Auto versions affected versions not specified Qualcomm Snapdragon Compute versions affected versions not specified Qualcomm Snapdragon Connectivity versions affected versions not specified Qualcomm Snapdragon Industrial IO...
The vulnerability of the wav_write_header() function in the Libsndfile library, which is used for reading and writing audio files, relates to reading data beyond the allowed buffer limits. This allows an attacker to cause a service failure.
The vulnerability of the wavwriteheader function in the Libsndfile library for reading and writing audio files is related to reading data beyond the allowable buffer size. Exploiting this vulnerability could allow an attacker to cause a service failure...
The vulnerability of the WavpackPackInit function in the packUtils.c component of the WavPack audio codec, which is related to infinite loop execution, allows attackers to cause a service failure.
The vulnerability of the WavpackPackInit function in the packUtils.c component of the WavPack audio codec is related to the infinite execution of a loop. Exploiting this vulnerability allows an attacker to trigger a service failure using a specially created WAV audio file...
The vulnerability of the ParseDsdiffHeaderConfig function in the dsdiff.c component of the WavPack audio codec, related to division by zero, allows a attacker to cause a service failure.
The vulnerability of the ParseDsdiffHeaderConfig function in the dsdiff.c component of the WavPack audio codec is related to division by zero. Exploiting this vulnerability allows a remote attacker to cause a service failure using a malicious .wav file...
Advisory ROSA-SA-2021-1995
Software: wavpack 4.60.1 OS: Cobalt 7.9 CVE-ID: CVE-2016-10169 CVE-Crit: MEDIUM CVE-DESC: The readcode function in readwords.c in Wavpack before 5.1.0 allows remote attackers to cause a denial of service read out of range via a crafted WV file. CVE-STATUS: default CVE-REV: default CVE-ID:...
Advisory ROSA-SA-2021-1994
Software: vorbis-tools 1.4.0 OS: Cobalt 7.9 CVE-ID: CVE-2014-9638 CVE-Crit: MEDIUM CVE-DESC: oggenc in vorbis-tools 1.4.0 allows remote attackers to cause a denial of service division-by-zero error and crash via a WAV file with the number of channels set to zero. CVE-STATUS: default CVE-REV:...
Information Disclosure
bass is vulnerable to information disclosure. An out-of-bounds read vulnerability occurs when an attacker submits a malicious wav file...
CVE-2021-33844
A floating point exception divide-by-zero issue was discovered in SoX in functon startread of wav.c file. An attacker with a crafted wav file, could cause an application to crash...
Exploit for Improper Restriction of XML External Entity Reference in Wordpress
설치 및 실행 순서 0. docker 실행 $docker-compose up 1. w...
WordPress Core External Entity Injection (CVE-2021-29447)
An XXE vulnerability exists in WordPress Core. The vulnerability is due to insufficient validation of XML data when parsing RIFF WAV file metadata...
Daniel Kamil Kozar tsMuxer Buffer Overflow Vulnerability
Daniel Kamil Kozar tsMuxer is an open source application by Daniel Kamil Kozar. Transport stream mixer for remixing/mixing elementary streams. Daniel Kamil Kozar tsMuxer 2.6.16 suffers from a buffer overflow vulnerability that can be exploited by an attacker to cause a denial of service DoS by...
CVE-2021-26805
Buffer Overflow in tsMuxer 2.6.16 allows attackers to cause a Denial of Service DoS by running the application with a malicious WAV file...
CVE-2021-26805
Buffer Overflow in tsMuxer 2.6.16 allows attackers to cause a Denial of Service DoS by running the application with a malicious WAV file...
Buffer overflow
Buffer Overflow in tsMuxer 2.6.16 allows attackers to cause a Denial of Service DoS by running the application with a malicious WAV file...
CVE-2021-26805
CVE-2021-26805 concerns a buffer overflow in tsMuxer 2.6.16 when processing a malicious WAV file, enabling a DoS. Affected component: tsMuxer (2.6.16). Root cause: buffer overflow in WAV handling. Impact: denial of service; availability partially affected. Exploitation details are not provided in...