PT-2021-10978

Name of the Vulnerable Software and Affected Versions: Speex version 1.2 Description: A Divide by Zero vulnerability in the function read samples of Speex allows attackers to cause a denial of service DoS via a crafted WAV file. Recommendations: For Speex version 1.2, as a temporary workaround,...

SAyHello - Capturing Audio (.Wav) From Target Using A Link

Capturing audio .wav from target using a link How it works? After the user grants microphone permissions, a website redirect button of your choice is released to distract the target while small audio files about 4 seconds in wav format are sent to the attacker. It uses Recorderjs, plugin for...

Denial Of Service (DoS)

lame is vulnerable to denial of service DoS. The vulnerability exists as the unpackreadsamples function in frontend/getaudio.c in LAME 3.99.5 allows remote attackers to cause a denial of service invalid memory read and application crash via a crafted wav file...

Arbitrary Code Execution

wavpack is vulnerable to arbitrary code execution. The vulnerability exists as the WAV parser component contains a vulnerability that allows writing to memory because ParseRiffHeaderConfig in riff.c does not reject multiple format chunks...

CVE-2019-5618

A-PDF WAV to MP3 version 1.0.0 suffers from an instance of CWE-121: Stack-based Buffer Overflow...

CVE-2019-5618

A-PDF WAV to MP3 version 1.0.0 suffers from an instance of CWE-121: Stack-based Buffer Overflow...

CVE-2019-5618 A-PDF WAV to MP3 Stack-based Buffer Overflow

A-PDF WAV to MP3 version 1.0.0 suffers from an instance of CWE-121: Stack-based Buffer Overflow...

CVE-2019-5618

The CVE-2019-5618 entry concerns A-PDF WAV to MP3 version 1.0.0. Multiple connected sources confirm a CWE-121 stack-based buffer overflow vulnerability arising from memory operations without proper data boundary validation on this product. Affected component: the WAV->MP3 conversion tool (vers...

CVE-2019-5618: Stack-based Buffer Overflow

A-PDF WAV to MP3 version 1.0.0 suffers from an instance of CWE-121: Stack-based Buffer Overflow...

PT-2020-11145

Name of the Vulnerable Software and Affected Versions A-PDF WAV to MP3 version 1.0.0 Description The issue is related to a Stack-based Buffer Overflow, which is an instance of CWE-121. This occurs when more data is written to a buffer than it is designed to hold, causing a potential overflow of...

wavpack: Use of uninitialized variable in ParseCaffHeaderConfig leads to DoS

WavPack 5.1.0 and earlier is affected by: CWE-457: Use of Uninitialized Variable. The impact is: Unexpected control flow, crashes, and segfaults. The component is: ParseCaffHeaderConfig caff.c:486. The attack vector is: Maliciously crafted .wav file. The fixed version is: After commit...

wavpack: Divide by zero in ParseDsdiffHeaderConfig leads to crash

WavPack 5.1 and earlier is affected by: CWE 369: Divide by Zero. The impact is: Divide by zero can lead to sudden crash of a software/service that tries to parse a .wav file. The component is: ParseDsdiffHeaderConfig dsdiff.c:282. The attack vector is: Maliciously crafted .wav file. The fixed...

wavpack: Use of uninitialized variable in ParseWave64HeaderConfig leads to DoS

WavPack 5.1.0 and earlier is affected by: CWE-457: Use of Uninitialized Variable. The impact is: Unexpected control flow, crashes, and segfaults. The component is: ParseWave64HeaderConfig wave64.c:211. The attack vector is: Maliciously crafted .wav file. The fixed version is: After commit...

wawpack: Infinite loop in WavpackPackInit function lead to DoS

The function WavpackPackInit in packutils.c in libwavpack.a in WavPack through 5.1.0 allows attackers to cause a denial-of-service resource exhaustion caused by an infinite loop via a crafted wav audio file because WavpackSetConfiguration64 mishandles a sample rate of zero...

CVE-2018-19840

The function WavpackPackInit in packutils.c in libwavpack.a in WavPack through 5.1.0 allows attackers to cause a denial-of-service resource exhaustion caused by an infinite loop via a crafted wav audio file because WavpackSetConfiguration64 mishandles a sample rate of zero...

Memory Corruption Vulnerability in DCCE HMIware at Dalian Polytechnic Computer Control Engineering Co.

DCCE HMIware configuration editing software, is a special human-machine interface configuration software developed for DCCE touch screen, the software provides users with a powerful integrated development environment, the product is widely used in the field of medical, chemical, electric power,...

CVE-2019-1010315

WavPack 5.1 and earlier is affected by: CWE 369: Divide by Zero. The impact is: Divide by zero can lead to sudden crash of a software/service that tries to parse a .wav file. The component is: ParseDsdiffHeaderConfig dsdiff.c:282. The attack vector is: Maliciously crafted .wav file. The fixed...

CVE-2019-19698

marc-q libwav through 2017-04-20 has a NULL pointer dereference in wavcontentread at libwav.c...

PT-2019-15919

Name of the Vulnerable Software and Affected Versions marc-q libwav versions prior to 2017-04-20 Description The issue is related to a NULL pointer dereference in the wav content read function at libwav.c. Recommendations For versions prior to 2017-04-20, consider restricting access to the wav...

libwav null pointer dereference vulnerability (CNVD-2020-09637)

libwav is a simple wav library written in pure C . A null pointer dereference vulnerability exists in wavcontentread in libwav.c in libwav 2017-04-20 and earlier versions, which can be exploited by an attacker to cause a denial of service...