Lucene search
+L

1344 matches found

EUVD
EUVD
added 2022/05/17 12:26 a.m.5 views

EUVD-2017-15881

Heap-based buffer overflow in the MSADPCM::initializeCoefficients function in MSADPCM.cpp in audiofile aka libaudiofile and Audio File Library 0.3.6 allows remote attackers to have unspecified impact via a crafted audio file...

7.8CVSS8AI score0.0294EPSS
SaveExploits0References8
Github Security Blog
Github Security Blog
added 2022/05/17 12:14 a.m.19 views

Aubio Divide-By-Zero DoS vulnerability in new_aubio_source_wavread function

In aubio 0.4.6, a divide-by-zero error exists in the function newaubiosourcewavread in sourcewavread.c, which may lead to DoS when playing a crafted audio file...

5.5CVSS6.7AI score0.00842EPSS
SaveExploits0References6Affected Software1
OSV
OSV
added 2022/05/17 12:14 a.m.17 views

GHSA-VCWX-8MQH-2557 Aubio Divide-By-Zero DoS vulnerability in new_aubio_source_wavread function

In aubio 0.4.6, a divide-by-zero error exists in the function newaubiosourcewavread in sourcewavread.c, which may lead to DoS when playing a crafted audio file...

7.1CVSS5.1AI score0.00842EPSS
SaveExploits0References6
OSV
OSV
added 2022/05/14 3:7 a.m.12 views

GHSA-45H5-CQQW-9RJW Aubio is vulnerable to a NULL pointer dereference

A NULL pointer dereference DoS Vulnerability was found in the function aubiosourceavcodecreadframe in io/sourceavcodec.c of aubio, which may lead to DoS when playing a crafted audio file...

6.8CVSS5.4AI score0.00745EPSS
SaveExploits0References6
Github Security Blog
Github Security Blog
added 2022/05/14 3:7 a.m.24 views

Aubio is vulnerable to a NULL pointer dereference

A NULL pointer dereference DoS Vulnerability was found in the function aubiosourceavcodecreadframe in io/sourceavcodec.c of aubio, which may lead to DoS when playing a crafted audio file...

5.5CVSS6.7AI score0.00745EPSS
SaveExploits0References6Affected Software1
OSV
OSV
added 2022/05/10 6:49 p.m.7 views

USN-5409-1 libsndfile vulnerability

It was discovered that libsndfile was incorrectly performing memory management operations and incorrectly using buffers when executing its FLAC codec. If a user or automated system were tricked into processing a specially crafted sound file, an attacker could possibly use this issue to cause a...

7.1CVSS7AI score0.01754EPSS
SaveExploits1References2
RedHat Linux
RedHat Linux
added 2022/05/10 1:27 p.m.4 views

webkitgtk: Out-of-bounds read leading to memory disclosure

An out-of-bounds read flaw was found in WebKitGTK. A specially crafted audio file could use this flaw to trigger a disclosure of memory when processed...

5.5CVSS6.6AI score0.01027EPSS
SaveExploits0References4
BDU FSTEC
BDU FSTEC
added 2022/04/14 12:0 a.m.8 views

The vulnerability of the libsndfile library for reading and writing audio files involves a numerical overflow with empty stack traces, allowing an attacker to execute arbitrary code in the target system.

The vulnerability of the libsndfile library for reading and writing audio files is related to a numerical overflow with empty stack traces. Exploiting this vulnerability could allow an attacker to execute arbitrary code on the target system...

10CVSS6.1AI score
SaveExploits0References5Affected Software3
BDU FSTEC
BDU FSTEC
added 2022/04/14 12:0 a.m.10 views

The vulnerability of the wavlike_ima_decode_block() function in the libsndfile library for reading and writing audio files allows a attacker to execute arbitrary code on the target system.

The vulnerability of the wavlikeimadecodeblock function in the libsndfile library for reading and writing audio files is related to buffer overflow in dynamic memory. Exploiting this vulnerability could allow a remote attacker to execute arbitrary code on the target system...

10CVSS6.5AI score
SaveExploits0References5Affected Software3
BDU FSTEC
BDU FSTEC
added 2022/04/14 12:0 a.m.8 views

The vulnerability of the psf_log_printf() function in the libsndfile library, which is used for reading and writing audio files, allows a hacker to execute arbitrary code on the target system.

The vulnerability of the psflogprintf function in the libsndfile library, which is used for reading and writing audio files, is related to a numerical overflow vulnerability. Exploiting this vulnerability could allow an attacker to execute arbitrary code on the target system...

10CVSS6.1AI score
SaveExploits0References5Affected Software3
Redos
Redos
added 2022/04/07 12:0 a.m.34 views

ROS-20220407-01

Vulnerability of libsndfile audio file reading and writing library is related to memory leak in function cafreadheader. Exploitation of the vulnerability could allow an attacker acting remotely to force an application to incorrectly free memory before deleting the last link and executing an attac...

8.2AI score
SaveExploits0
OSV
OSV
added 2022/03/16 3:15 p.m.9 views

CVE-2021-40739

Adobe Audition version 14.4 and earlier is affected by a memory corruption vulnerability when parsing a M4A file, potentially resulting in arbitrary code execution in the context of the current user. User interaction is required to exploit this vulnerability...

7.8CVSS6.3AI score0.0175EPSS
SaveExploits0References1
OSV
OSV
added 2022/03/16 3:15 p.m.8 views

CVE-2021-40740

Adobe Audition version 14.4 and earlier is affected by a memory corruption vulnerability when parsing a M4A file, potentially resulting in arbitrary code execution in the context of the current user. User interaction is required to exploit this vulnerability...

7.8CVSS7.6AI score0.0175EPSS
SaveExploits0References1
NVD
NVD
added 2022/02/28 7:15 p.m.15 views

CVE-2022-25023

Audio File commit 004065d was discovered to contain a heap-buffer overflow in the function fouBytesToInt:AudioFile.h...

8.8CVSS0.01195EPSS
SaveExploits1References1
ATTACKERKB
ATTACKERKB
added 2022/02/28 7:15 p.m.7 views

CVE-2022-25023

Audio File commit 004065d was discovered to contain a heap-buffer overflow in the function fouBytesToInt:AudioFile.h...

8.8CVSS5.9AI score0.01195EPSS
SaveExploits1References2
OSV
OSV
added 2022/02/28 6:33 p.m.14 views

CVE-2022-25023

Audio File commit 004065d was discovered to contain a heap-buffer overflow in the function fouBytesToInt:AudioFile.h...

7.5AI score
SaveExploits0References3
CVE
CVE
added 2022/02/28 6:33 p.m.123 views

CVE-2022-25023

CVE-2022-25023: A heap-buffer overflow in AudioFile.h::fouBytesToInt() (triggered by commit 004065d) affects the AudioFile library (header-only C++). NVD lists a network-exploitable issue with high impact to confidentiality, integrity, and availability (CVSSv3.1: 8.8, requires user interaction). ...

8.8CVSS8.8AI score0.01195EPSS
SaveExploits1References1Affected Software1
Cvelist
Cvelist
added 2022/02/28 6:33 p.m.27 views

CVE-2022-25023

Audio File commit 004065d was discovered to contain a heap-buffer overflow in the function fouBytesToInt:AudioFile.h...

9.1AI score0.01195EPSS
SaveExploits1References1
CNNVD
CNNVD
added 2022/02/28 12:0 a.m.8 views

AudioFile 缓冲区错误漏洞

AudioFile is a simple header-only C++ library from Adam Stark's personal developer in the UK. It is used to read and write audio files. A security vulnerability exists in AudioFile, which stems from a heap buffer overflow contained in the function fouBytesToInt:AudioFile.h. The vulnerability is...

8.8CVSS8.2AI score0.01195EPSS
SaveExploits1References2
OSV
OSV
added 2022/02/24 3:15 p.m.11 views

AZL-66563 CVE-2022-24599 affecting package audiofile 0.3.6-27

In autofile Audio File Library 0.3.6, there exists one memory leak vulnerability in printfileinfo, in printinfo.c, which allows an attacker to leak sensitive information via a crafted file. The printfileinfo function calls the copyrightstring function to get data, however, it dosn't use zero byte...

6.5CVSS6.5AI score0.01734EPSS
SaveExploits1References1
Rows per page
Query Builder