Buffer overflow

Buffer Overflow in tsMuxer 2.6.16 allows attackers to cause a Denial of Service DoS by running the application with a malicious WAV file...

CVE-2021-26805

Buffer Overflow in tsMuxer 2.6.16 allows attackers to cause a Denial of Service DoS by running the application with a malicious WAV file...

CVE-2021-26805

Buffer Overflow in tsMuxer 2.6.16 allows attackers to cause a Denial of Service DoS by running the application with a malicious WAV file...

CVE-2021-26805

CVE-2021-26805 concerns a buffer overflow in tsMuxer 2.6.16 when processing a malicious WAV file, enabling a DoS. Affected component: tsMuxer (2.6.16). Root cause: buffer overflow in WAV handling. Impact: denial of service; availability partially affected. Exploitation details are not provided in...

Daniel Kamil Kozar tsMuxer 安全漏洞

Daniel Kamil Kozar tsMuxer is an open source application by Daniel Kamil Kozar. Transport stream mixer for remixing/mixing elementary streams. Daniel Kamil Kozar tsMuxer 2.6.16 suffers from a buffer overflow vulnerability that can be exploited by an attacker to cause a denial of service DoS by...

PT-2021-17141

Name of the Vulnerable Software and Affected Versions tsMuxer version 2.6.16 Description The issue allows attackers to cause a Denial of Service DoS by running the application with a malicious WAV file. This can be achieved through a Buffer Overflow. Recommendations For tsMuxer version 2.6.16,...

CVE-2021-26805: Buffer Copy without Checking Size of Input

Buffer Overflow in tsMuxer 2.6.16 allows attackers to cause a Denial of Service DoS by running the application with a malicious WAV file...

[SECURITY] Fedora 33 Update: mediainfo-21.03-1.fc33

MediaInfo CLI Command Line Interface. What information can I get from MediaInfo? General: title, author, director, album, track number, date, duration... Video: codec, aspect, fps, bitrate... Audio: codec, sample rate, channels, language, bitrate... Text: language of subtitle Chapters: number of...

It was discovered the fix for CVE-2018-19758 (libsndfile) was not complete and still allows a read beyond the limits of a buffer in wav_write_header() function in wav.c. A local attacker may use this flaw to make the application crash.

...

PT-2021-3666

Name of the Vulnerable Software and Affected Versions libsndfile version 1.0.30 Description The issue is caused by a heap buffer overflow in the msadpcm decode block function of the libsndfile library. This can be exploited by a remote attacker using a specially crafted WAV file, potentially...

CVE-2021-0312

In WAVSource::read of WAVExtractor.cpp, there is a possible out of bounds write due to an integer overflow. This could lead to remote information disclosure with no additional execution privileges needed. User interaction is needed for exploitation. Product: Android; Versions: Android-8.1,...

Ubuntu 18.04 LTS / 20.04 LTS : WavPack vulnerability (USN-4682-1)

The remote Ubuntu 18.04 LTS / 20.04 LTS host has packages installed that are affected by a vulnerability as referenced in the USN-4682-1 advisory. It was discovered that WavPack incorrectly handled certain WAV files. An attacker could possibly use this issue to execute arbitrary code or cause a...

USN-4682-1 wavpack vulnerability

It was discovered that WavPack incorrectly handled certain WAV files. An attacker could possibly use this issue to execute arbitrary code or cause a crash...

USN-4682-1: WavPack vulnerability

It was discovered that WavPack incorrectly handled certain WAV files. An attacker could possibly use this issue to execute arbitrary code or cause a crash...

ASB-A-170583712

In WAVSource::read of WAVExtractor.cpp, there is a possible out of bounds write due to an integer overflow. This could lead to remote information disclosure with no additional execution privileges needed. User interaction is needed for exploitation...

Buffer Overflows

Sound eXchange is vulnerable to buffer overflows. Remote attackers could cause overflows using a crafted WAV file via AdpcmReadBlock function...

Denial Of Service (DoS)

sox is vulnerable to denial of service DoS. The vulnerability exists in the startread function in wav.c, allowing a malicious user to crash the application via a crafted wav file...

Denial Of Service (DoS)

wavwritehdr is vulnerable to denial of service. An attacker may cause a denial of service via a crafted snd file, during conversion to a wav file...

Apple macOS AudioToolboxCore Wave Header Parsing Sign Extension Remote Code Execution Vulnerability

This vulnerability allows remote attackers to execute arbitrary code on affected installations of Apple macOS. Interaction with the AudioToolbox library is required to exploit this vulnerability but attack vectors may vary depending on the implementation. The specific flaw exists within the...

openSUSE Security Update : java-1_8_0-openjdk (openSUSE-2020-2083)

This update for java-180-openjdk fixes the following issues : - Fix regression '8250861: Crash in MinINode::IdealPhaseGVN, bool', introduced in October 2020 CPU. - Update to version jdk8u272 icedtea 3.17.0 July 2020 CPU, bsc1174157, and October 2020 CPU, bsc1177943 - New features + JDK-8245468: A...