CVE-2018-19840

The function WavpackPackInit in packutils.c in libwavpack.a in WavPack through 5.1.0 allows attackers to cause a denial-of-service resource exhaustion caused by an infinite loop via a crafted wav audio file because WavpackSetConfiguration64 mishandles a sample rate of zero...

UBUNTU-CVE-2018-19840

The function WavpackPackInit in packutils.c in libwavpack.a in WavPack through 5.1.0 allows attackers to cause a denial-of-service resource exhaustion caused by an infinite loop via a crafted wav audio file because WavpackSetConfiguration64 mishandles a sample rate of zero...

DEBIAN-CVE-2018-19758

There is a heap-based buffer over-read at wav.c in wavwriteheader in libsndfile 1.0.28 that will cause a denial of service...

libsndfile buffer out-of-bounds read vulnerability (CNVD-2019-00814)

libsndfile is a C library developed by software developer Erik de Castro Lopo that reads and writes audio files in AIFF, AU, and WAV formats through standard interfaces. A heap buffer out-of-bounds read vulnerability exists in the wav.c file in libsndfile version 1.0.28, which can be exploited to...

PT-2018-3716

Name of the Vulnerable Software and Affected Versions libsndfile version 1.0.28 Description The issue is related to a heap-based buffer over-read in the wav write header function of the libsndfile library. This can cause a denial of service. The vulnerability is associated with reading beyond the...

UBUNTU-CVE-2018-19758

There is a heap-based buffer over-read at wav.c in wavwriteheader in libsndfile 1.0.28 that will cause a denial of service...

SoundTouch Denial of Service Vulnerability (CNVD-2019-17469)

SoundTouch is an open source audio processing library for changing the Tempo, Pitch and Playback Rates of an audio stream or audio file. A denial of service vulnerability exists in the WavFileBase class in WavFile.cpp in SoundTouch 2.0, which can be exploited by remote attackers to cause a denial...

CVE-2018-16797

A heap-based buffer overflow in PotPlayerMini.exe in PotPlayer 1.7.8556 allows remote attackers to execute arbitrary code via a .wav file with large BytesPerSec and SamplesPerSec values, and a small DataChunkSize value...

Heap overflow

A heap-based buffer overflow in PotPlayerMini.exe in PotPlayer 1.7.8556 allows remote attackers to execute arbitrary code via a .wav file with large BytesPerSec and SamplesPerSec values, and a small DataChunkSize value...

CVE-2018-16797

A heap-based buffer overflow in PotPlayerMini.exe in PotPlayer 1.7.8556 allows remote attackers to execute arbitrary code via a .wav file with large BytesPerSec and SamplesPerSec values, and a small DataChunkSize value...

CVE-2018-16797

A heap-based buffer overflow in PotPlayerMini.exe in PotPlayer 1.7.8556 allows remote attackers to execute arbitrary code via a .wav file with large BytesPerSec and SamplesPerSec values, and a small DataChunkSize value...

PT-2018-13756

Name of the Vulnerable Software and Affected Versions PotPlayer version 1.7.8556 Description A heap-based buffer overflow issue exists, allowing remote attackers to execute arbitrary code via a .wav file with large BytesPerSec and SamplesPerSec values, and a small Data Chunk Size value...

CVE-2018-16797: Out-of-bounds Write

A heap-based buffer overflow in PotPlayerMini.exe in PotPlayer 1.7.8556 allows remote attackers to execute arbitrary code via a .wav file with large BytesPerSec and SamplesPerSec values, and a small DataChunkSize value...

[SECURITY] Fedora 27 Update: soundtouch-2.0.0-6.fc27

SoundTouch is a LGPL-licensed open-source audio processing library for changing the Tempo, Pitch and Playback Rates of audio streams or files. The SoundTouch library is suited for application developers writing sound processing tools that require tempo/pitch control functionality, or just for...

MGASA-2018-0331 Updated soundtouch packages fix security vulnerabilities

Updated soundtouch package fixes security vulnerabilities: The TDStretch::processSamples function in source/SoundTouch/TDStretch.cpp in SoundTouch 1.9.2 allows remote attackers to cause a denial of service infinite loop and CPU consumption via a crafted wav file CVE-2017-9258. The...

Sidify Music Converter 1.2.9 DLL Hijacking

===================================================== Exploit Title : Sidify Music Converter 1.2.9 - DLL Hijacking Code Execution Date Discovered : 2018-19-07 Affected Products: Sidify Music Converter v1.2.9 - Software Exploitation Technique: Local Severity Level: Medium Tested OS : Windows 7 &...

CVE-2018-14948

An issue has been found in dilawar sound through 2017-11-27. The end of openWavFile in wav-file.cc has Mismatched Memory Management Routines operator new versus operator delete...

CVE-2018-14948

An issue has been found in dilawar sound through 2017-11-27. The end of openWavFile in wav-file.cc has Mismatched Memory Management Routines operator new versus operator delete...

CVE-2018-14948

The CVE-2018-14948 issue affects the dilawar sound library up to 2017-11-27, specifically the end of openWavFile in wav-file.cc. The root cause is a mismatched memory management routine: operator new[] versus operator delete. This mismatch can lead to memory corruption or related stability risks....

PT-2018-12824

Name of the Vulnerable Software and Affected Versions dilawar sound through 2017-11-27 Description The issue is related to Mismatched Memory Management Routines, specifically the use of operator new versus operator delete in the end of openWavFile in wav-file.cc. Recommendations For dilawar sound...