PT-2015-2261

Name of the Vulnerable Software and Affected Versions Android versions prior to 5.1.1 LMY48T Description The issue is caused by a buffer overflow in the libutils component of the Android operating system. This allows remote attackers to execute arbitrary code or cause a denial of service memory...

CVE-2015-3875: Improper Restriction of Operations within the Bounds of a Memory Buffer

libutils in Android before 5.1.1 LMY48T allows remote attackers to execute arbitrary code or cause a denial of service memory corruption via a crafted audio file, aka internal bug 22952485...

APPLE-SA-2015-09-21-1 watchOS 2

APPLE-SA-2015-09-21-1 watchOS 2 watchOS 2 is now available and addresses the following: Apple Pay Available for: Apple Watch Sport, Apple Watch, and Apple Watch Edition Impact: Some cards may allow a terminal to retrieve limited recent transaction information when making a payment Description: Th...

Android Arbitrary Code Execution Vulnerability (CNVD-2015-06514 )

Android is an operating system based on the Linux open kernel. An arbitrary code execution vulnerability in Android to 5.1.1 LMY48M allows remote attackers to execute arbitrary code via metadata in specially crafted MP3 or MP4 files...

Android Arbitrary Code Execution Vulnerability

Android is an operating system based on the Linux open kernel. Android has been disclosed to have an arbitrary code execution vulnerability that allows remote attackers to execute arbitrary code via metadata in specially crafted MP3 or MP4 files...

DEBIAN-CVE-2015-6602

libutils in Android through 5.1.1 LMY48M allows remote attackers to execute arbitrary code via crafted metadata in a 1 MP3 or 2 MP4 file, as demonstrated by an attack against use of libutils by libstagefright in Android 5.x...

The vulnerability of the iOS operating system, which allows a hacker to trigger a service failure

The vulnerability of the Audio component in the iOS operating system arises due to buffer overflow. Exploiting this vulnerability allows a malicious actor to cause a service failure using a specially crafted audio file...

CVE-2015-3875

libutils in Android before 5.1.1 LMY48T allows remote attackers to execute arbitrary code or cause a denial of service memory corruption via a crafted audio file, aka internal bug 22952485...

vorbis-tools buffer overflow vulnerability

vorbis-tools is a set of Ogg an audio compression format vorbis tools. A buffer overflow vulnerability exists in the 'aiffopen' function in the oggenc/audio.c file in vorbis-tools 1.4.0 and earlier. A remote attacker can exploit this vulnerability to cause a denial of service crash with the help ...

UBUNTU-CVE-2015-6749

Buffer overflow in the aiffopen function in oggenc/audio.c in vorbis-tools 1.4.0 and earlier allows remote attackers to cause a denial of service crash via a crafted AIFF file...

Apple iOS Audio File Handling Denial of Service Vulnerability

Apple iOS is the latest operating system that runs on Apple's iPhone and iPod touch devices. A security vulnerability in Apple iOS's handling of audio files allows a remote user to construct malicious files that can be tricked into loading, which can crash the target application...

CVE-2015-5862

The Audio component in Apple iOS before 9 allows remote attackers to cause a denial of service memory corruption and application crash via a crafted audio file...

Memory corruption

The Audio component in Apple iOS before 9 allows remote attackers to cause a denial of service memory corruption and application crash via a crafted audio file...

CVE-2015-5862

The Audio component in Apple iOS before 9 allows remote attackers to cause a denial of service memory corruption and application crash via a crafted audio file...

CVE-2015-5862: Improper Restriction of Operations within the Bounds of a Memory Buffer

The Audio component in Apple iOS before 9 allows remote attackers to cause a denial of service memory corruption and application crash via a crafted audio file...

RedHat Update for flac RHSA-2015:0767-01

The remote host is missing an update for the SPDX-FileCopyrightText: 2015 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

CentOS Update for flac CESA-2015:0767 centos7

Check the version of flac SPDX-FileCopyrightText: 2015 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription scriptoid"1.3.6.1.4.1.25623.1.0.882152";...

Important: Red Hat Security Advisory: flac security update

Updated flac packages that fix two security issues are now available for Red Hat Enterprise Linux 6 and 7. Red Hat Product Security has rated this update as having Important security impact. Common Vulnerability Scoring System CVSS base scores, which give detailed severity ratings, are available...

UBUNTU-CVE-2015-0825

Stack-based buffer underflow in the mozilla::MP3FrameParser::ParseBuffer function in Mozilla Firefox before 36.0 allows remote attackers to obtain sensitive information from process memory via a malformed MP3 file that improperly interacts with memory allocation during playback...

DEBIAN-CVE-2014-8145

Multiple heap-based buffer overflows in Sound eXchange SoX 14.4.1 and earlier allow remote attackers to have unspecified impact via a crafted WAV file to the 1 startread or 2 AdpcmReadBlock function...