Lucene search
K

1320 matches found

OSV
OSV
added 2022/02/24 3:15 p.m.1 views

UBUNTU-CVE-2022-24599

In autofile Audio File Library 0.3.6, there exists one memory leak vulnerability in printfileinfo, in printinfo.c, which allows an attacker to leak sensitive information via a crafted file. The printfileinfo function calls the copyrightstring function to get data, however, it dosn't use zero byte...

6.5CVSS6.5AI score0.00201EPSS
Exploits1References4
UbuntuCve
UbuntuCve
added 2022/02/24 3:15 p.m.25 views

CVE-2022-24599

In autofile Audio File Library 0.3.6, there exists one memory leak vulnerability in printfileinfo, in printinfo.c, which allows an attacker to leak sensitive information via a crafted file. The printfileinfo function calls the copyrightstring function to get data, however, it dosn't use zero byte...

6.5CVSS6.6AI score0.00201EPSS
Exploits1References3
Prion
Prion
added 2022/02/24 3:15 p.m.20 views

Memory corruption

In autofile Audio File Library 0.3.6, there exists one memory leak vulnerability in printfileinfo, in printinfo.c, which allows an attacker to leak sensitive information via a crafted file. The printfileinfo function calls the copyrightstring function to get data, however, it dosn't use zero byte...

4.3CVSS5.9AI score0.00201EPSS
Exploits1References5Affected Software3
CNNVD
CNNVD
added 2022/02/24 12:0 a.m.2 views

Audio File Library 安全漏洞

Audio File Library aka audiofile is an audio file library. A security vulnerability exists in Audio File Library version 0.3.6, which stems from a memory leak vulnerability in printfileinfo that allows an attacker to disclose sensitive information via a crafted file...

6.5CVSS6.2AI score0.00201EPSS
Exploits1References10
Positive Technologies
Positive Technologies
added 2022/02/22 12:0 a.m.2 views

PT-2022-16746 · Unknown +4 · Autofile Audio File Library +4

Name of the Vulnerable Software and Affected Versions: audiofile version 0.3.6 Description: A memory leak vulnerability exists in the printfileinfo function within printinfo.c of the audiofile Audio File Library. This allows an attacker to leak sensitive information by processing a crafted file...

8.8CVSS5.5AI score0.14976EPSS
Exploits4References53
Debian CVE
Debian CVE
added 2022/02/22 12:0 a.m.24 views

CVE-2022-24599

In autofile Audio File Library 0.3.6, there exists one memory leak vulnerability in printfileinfo, in printinfo.c, which allows an attacker to leak sensitive information via a crafted file. The printfileinfo function calls the copyrightstring function to get data, however, it dosn't use zero byte...

6.5CVSS5.9AI score0.00201EPSS
Exploits1
CVE
CVE
added 2022/02/22 12:0 a.m.116 views

CVE-2022-24599

CVE-2022-24599 concerns memory leak in autofile Audio File Library 0.3.6, specifically in printfileinfo() where the copyrightstring data is not properly truncated with zero bytes, potentially allowing leakage of sensitive information via a crafted file. Connected advisories confirm the issue acro...

6.5CVSS5.9AI score0.00201EPSS
Exploits1References6Affected Software1
Tenable Nessus
Tenable Nessus
added 2022/02/09 12:0 a.m.29 views

AlmaLinux 8 : libsndfile (ALSA-2020:1636)

The remote AlmaLinux 8 host has a package installed that is affected by multiple vulnerabilities as referenced in the ALSA-2020:1636 advisory. - A stack-based buffer overflow in psfmemset in common.c in libsndfile 1.0.28 allows remote attackers to cause a denial of service application crash or...

8.8CVSS7.3AI score0.01795EPSS
Exploits1References3
Redos
Redos
added 2022/01/14 12:0 a.m.10 views

ROS-20220114-02

Vulnerability in Mozilla Thunderbird email client, related to memory usage after memory freeing due to a race condition when playing audio files. Exploitation of the vulnerability could allow an attacker acting remotely to create a specially crafted audio shell, trigger a post-release usage error...

10CVSS9.2AI score0.00557EPSS
Exploits6
OSV
OSV
added 2022/01/07 12:10 a.m.14 views

GHSA-5F5C-687X-G5QM Classic Buffer Overflow in pyo

Buffer Overflow Vulnerability exists in ajaxsoundstudio.com in Pyo 1.03 in the Serverdebug function, which allows remote attackers to conduct DoS attacks by deliberately passing on an overlong audio file name...

7.5CVSS7.3AI score0.0047EPSS
Exploits1References3
BDU FSTEC
BDU FSTEC
added 2021/12/28 12:0 a.m.2 views

The vulnerability of Adobe Premiere Rush software, related to the execution of operations beyond buffer boundaries in memory, allows attackers to execute arbitrary code.

The vulnerability of Adobe Premiere Rush relates to the execution of operations beyond the buffer in memory when processing M4A files. Exploiting this vulnerability can allow an attacker to execute arbitrary code...

7.8CVSS7.9AI score0.01803EPSS
Exploits0References4Affected Software1
OSV
OSV
added 2021/12/20 9:15 p.m.2 views

CVE-2021-43029

Adobe Premiere Rush version 1.5.16 and earlier is affected by a memory corruption vulnerability due to insecure handling of a malicious M4A file, potentially resulting in arbitrary code execution in the context of the current user. User interaction is required to exploit this vulnerability...

7.8CVSS6.5AI score0.01803EPSS
Exploits0References1
RedhatCVE
RedhatCVE
added 2021/12/20 7:22 p.m.32 views

CVE-2021-30836

An out-of-bounds read flaw was found in WebKitGTK. A specially crafted audio file could use this flaw to trigger a disclosure of memory when processed...

5.5CVSS1.9AI score0.00123EPSS
Exploits0References3
NVD
NVD
added 2021/12/17 9:15 p.m.5 views

CVE-2021-41499

Buffer Overflow Vulnerability exists in ajaxsoundstudio.com n Pyo 1.03 in the Serverdebug function, which allows remote attackers to conduct DoS attacks by deliberately passing on an overlong audio file name...

7.5CVSS0.0047EPSS
Exploits1References1
UbuntuCve
UbuntuCve
added 2021/12/17 9:15 p.m.11 views

CVE-2021-41499

Buffer Overflow Vulnerability exists in ajaxsoundstudio.com n Pyo 1.03 in the Serverdebug function, which allows remote attackers to conduct DoS attacks by deliberately passing on an overlong audio file name...

7.5CVSS7.1AI score0.0047EPSS
Exploits1References3
Cvelist
Cvelist
added 2021/12/17 8:36 p.m.13 views

CVE-2021-41499

Buffer Overflow Vulnerability exists in ajaxsoundstudio.com n Pyo 1.03 in the Serverdebug function, which allows remote attackers to conduct DoS attacks by deliberately passing on an overlong audio file name...

7.6AI score0.0047EPSS
Exploits1References1
Debian CVE
Debian CVE
added 2021/12/17 8:36 p.m.12 views

CVE-2021-41499

Buffer Overflow Vulnerability exists in ajaxsoundstudio.com n Pyo 1.03 in the Serverdebug function, which allows remote attackers to conduct DoS attacks by deliberately passing on an overlong audio file name...

7.5CVSS7.4AI score0.0047EPSS
Exploits1
CNNVD
CNNVD
added 2021/12/17 12:0 a.m.2 views

Pyo 安全漏洞

Pyo is a Python module written in C by the individual developer Olivier Belanger. It is used to help create digital signal processing scripts. ajaxsoundstudio.com A security vulnerability exists in versions of Pyo prior to 1.03, which can be exploited by an attacker to conduct a DoS attack by...

7.5CVSS7.3AI score0.0047EPSS
Exploits1References2
OSV
OSV
added 2021/12/15 7:15 a.m.0 views

UBUNTU-CVE-2021-40827

Clementine Music Player through 1.3.1 when a GLib 2.0.0 DLL is used is vulnerable to a Read Access Violation on Block Data Move, affecting the MP3 file parsing functionality at memcpy+0x265. The vulnerability is triggered when the user opens a crafted MP3 file or loads a remote stream URL that is...

7.8CVSS6.4AI score0.00426EPSS
Exploits1References3
OSV
OSV
added 2021/12/15 7:15 a.m.0 views

UBUNTU-CVE-2021-40826

Clementine Music Player through 1.3.1 is vulnerable to a User Mode Write Access Violation, affecting the MP3 file parsing functionality at clementine+0x3aa207. The vulnerability is triggered when the user opens a crafted MP3 file or loads a remote stream URL that is mishandled by Clementine...

7.8CVSS6.4AI score0.00426EPSS
Exploits1References3
Rows per page
Query Builder