Lucene search
K

26 matches found

OSV
OSV
added 2026/03/13 5:35 p.m.4 views

CVE-2026-31883 FreeRDP has a `size_t` underflow in ADPCM decoder leads to heap-buffer-overflow write

FreeRDP is a free implementation of the Remote Desktop Protocol. Prior to 3.24.0, a sizet underflow in the IMA-ADPCM and MS-ADPCM audio decoders leads to heap-buffer-overflow write via the RDPSND audio channel. In libfreerdp/codec/dsp.c, the IMA-ADPCM and MS-ADPCM decoders subtract block header...

6.5CVSS5.9AI score0.00317EPSS
Exploits1References4
ATTACKERKB
ATTACKERKB
added 2026/03/13 5:35 p.m.9 views

CVE-2026-31883

FreeRDP is a free implementation of the Remote Desktop Protocol. Prior to 3.24.0, a sizet underflow in the IMA-ADPCM and MS-ADPCM audio decoders leads to heap-buffer-overflow write via the RDPSND audio channel. In libfreerdp/codec/dsp.c, the IMA-ADPCM and MS-ADPCM decoders subtract block header...

6.5CVSS5.8AI score0.00317EPSS
Exploits1References3Affected Software1
Positive Technologies
Positive Technologies
added 2026/01/01 12:0 a.m.2 views

PT-2026-25337

Name of the Vulnerable Software and Affected Versions FreeRDP versions prior to 3.24.0 Description FreeRDP is a free implementation of the Remote Desktop Protocol. A division by zero error exists in the MS-ADPCM and IMA-ADPCM decoders when the nBlockAlign variable is 0, resulting in a crash. The...

9.8CVSS5.8AI score0.00599EPSS
Exploits3References91
Tenable Nessus
Tenable Nessus
added 2016/06/09 12:0 a.m.21 views

Debian DSA-3598-1 : vlc - security update

Patrick Coleman discovered that missing input sanitising in the ADPCM decoder of the VLC media player may result in the execution of arbitrary code if a malformed media file is opened. %NASLMINLEVEL 70300 C Tenable Network Security, Inc. The descriptive text and package checks in this plugin were...

9.8CVSS8.5AI score0.24748EPSS
Exploits1References3
OSV
OSV
added 2016/06/07 12:0 a.m.13 views

DSA-3598-1 vlc - security update

Bulletin has no description...

9.8CVSS9.5AI score0.24748EPSS
Exploits1
OpenVAS
OpenVAS
added 2016/06/06 12:0 a.m.26 views

Debian: Security Advisory (DSA-3598-1)

The remote host is missing an update for the Debian SPDX-FileCopyrightText: 2016 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

9.8CVSS9.5AI score0.24748EPSS
Exploits1References3
Rows per page
Query Builder