Lucene search
+L

1504 matches found

CVE
CVE
•added 2022/02/28 6:33 p.m.•149 views

CVE-2022-25023

CVE-2022-25023: A heap-buffer overflow in AudioFile.h::fouBytesToInt() (triggered by commit 004065d) affects the AudioFile library (header-only C++). NVD lists a network-exploitable issue with high impact to confidentiality, integrity, and availability (CVSSv3.1: 8.8, requires user interaction). ...

8.8CVSS8.8AI score0.01195EPSS
SaveExploits1References1Affected Software1
Mend
Mend
•added 2022/02/28 6:33 p.m.•5 views

CVE-2022-25023

Audio File commit 004065d was discovered to contain a heap-buffer overflow in the function fouBytesToInt:AudioFile.h...

8.8CVSS0.01195EPSS
SaveExploits1References3
osv-cve
osv-cve
•added 2022/02/28 6:33 p.m.•23 views

CVE-2022-25023

Audio File commit 004065d was discovered to contain a heap-buffer overflow in the function fouBytesToInt:AudioFile.h...

7.5AI score
SaveExploits0References3
Positive Technologies
Positive Technologies
•added 2022/02/28 12:00 a.m.•7 views

PT-2022-17055

Name of the Vulnerable Software and Affected Versions Audio File version 004065d Description A heap-buffer overflow was discovered in the function fouBytesToInt in AudioFile.h. This issue affects the specified commit of the Audio File software. Recommendations For Audio File version 004065d,...

8.8CVSS0.01195EPSS
SaveExploits1References6
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2022/02/28 12:00 a.m.•10 views

CVE-2022-25023: Out-of-bounds Write

Audio File commit 004065d was discovered to contain a heap-buffer overflow in the function fouBytesToInt:AudioFile.h...

8.8CVSS7.8AI score0.01195EPSS
SaveExploits1References2
CNNVD
CNNVD
•added 2022/02/28 12:00 a.m.•21 views

AudioFile 缓冲区错误漏洞

AudioFile is a simple header-only C++ library from Adam Stark's personal developer in the UK. It is used to read and write audio files. A security vulnerability exists in AudioFile, which stems from a heap buffer overflow contained in the function fouBytesToInt:AudioFile.h. The vulnerability is...

8.8CVSS8.2AI score0.01195EPSS
SaveExploits1References2
osv-azl
osv-azl
•added 2022/02/24 3:15 p.m.•17 views

AZL-66563 CVE-2022-24599 affecting package audiofile 0.3.6-27

In autofile Audio File Library 0.3.6, there exists one memory leak vulnerability in printfileinfo, in printinfo.c, which allows an attacker to leak sensitive information via a crafted file. The printfileinfo function calls the copyrightstring function to get data, however, it dosn't use zero byte...

6.5CVSS6.5AI score0.01734EPSS
SaveExploits1References1
UbuntuCve
UbuntuCve
•added 2022/02/24 3:15 p.m.•39 views

CVE-2022-24599

In autofile Audio File Library 0.3.6, there exists one memory leak vulnerability in printfileinfo, in printinfo.c, which allows an attacker to leak sensitive information via a crafted file. The printfileinfo function calls the copyrightstring function to get data, however, it dosn't use zero byte...

6.5CVSS6.6AI score0.01734EPSS
SaveExploits1References3
Prion
Prion
•added 2022/02/24 3:15 p.m.•29 views

Memory corruption

In autofile Audio File Library 0.3.6, there exists one memory leak vulnerability in printfileinfo, in printinfo.c, which allows an attacker to leak sensitive information via a crafted file. The printfileinfo function calls the copyrightstring function to get data, however, it dosn't use zero byte...

4.3CVSS5.9AI score0.01734EPSS
SaveExploits1References5Affected Software3
osv-ubuntu
osv-ubuntu
•added 2022/02/24 3:15 p.m.•19 views

UBUNTU-CVE-2022-24599

In autofile Audio File Library 0.3.6, there exists one memory leak vulnerability in printfileinfo, in printinfo.c, which allows an attacker to leak sensitive information via a crafted file. The printfileinfo function calls the copyrightstring function to get data, however, it dosn't use zero byte...

6.5CVSS6.5AI score0.01734EPSS
SaveExploits1References4
CNNVD
CNNVD
•added 2022/02/24 12:00 a.m.•11 views

Audio File Library 安全漏洞

Audio File Library aka audiofile is an audio file library. A security vulnerability exists in Audio File Library version 0.3.6, which stems from a memory leak vulnerability in printfileinfo that allows an attacker to disclose sensitive information via a crafted file...

6.5CVSS6.2AI score0.01734EPSS
SaveExploits1References10
CVE
CVE
•added 2022/02/22 12:00 a.m.•151 views

CVE-2022-24599

CVE-2022-24599 concerns memory leak in autofile Audio File Library 0.3.6, specifically in printfileinfo() where the copyrightstring data is not properly truncated with zero bytes, potentially allowing leakage of sensitive information via a crafted file. Connected advisories confirm the issue acro...

6.5CVSS5.9AI score0.01734EPSS
SaveExploits1References6Affected Software1
Mend
Mend
•added 2022/02/22 12:00 a.m.•2 views

CVE-2022-24599

In autofile Audio File Library 0.3.6, there exists one memory leak vulnerability in printfileinfo, in printinfo.c, which allows an attacker to leak sensitive information via a crafted file. The printfileinfo function calls the copyrightstring function to get data, however, it dosn't use zero byte...

7.1CVSS0.01734EPSS
SaveExploits1References10
Positive Technologies
Positive Technologies
•added 2022/02/22 12:00 a.m.•13 views

PT-2022-16746

Name of the Vulnerable Software and Affected Versions autofile Audio File Library version 0.3.6 Description The issue is related to a memory leak in the printfileinfo function, located in printinfo.c, which can be exploited by an attacker to leak sensitive information via a crafted file. This...

6.5CVSS5.5AI score0.01734EPSS
SaveExploits1References48
Debian CVE
Debian CVE
•added 2022/02/22 12:00 a.m.•49 views

CVE-2022-24599

In autofile Audio File Library 0.3.6, there exists one memory leak vulnerability in printfileinfo, in printinfo.c, which allows an attacker to leak sensitive information via a crafted file. The printfileinfo function calls the copyrightstring function to get data, however, it dosn't use zero byte...

6.5CVSS5.9AI score0.01734EPSS
SaveExploits1
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2022/02/22 12:00 a.m.•5 views

CVE-2022-24599: Missing Release of Memory after Effective Lifetime

In autofile Audio File Library 0.3.6, there exists one memory leak vulnerability in printfileinfo, in printinfo.c, which allows an attacker to leak sensitive information via a crafted file. The printfileinfo function calls the copyrightstring function to get data, however, it dosn't use zero byte...

6.5CVSS6.2AI score0.01734EPSS
SaveExploits1References2
Tenable Nessus
Tenable Nessus
•added 2022/02/09 12:00 a.m.•36 views

AlmaLinux 8 : libsndfile (ALSA-2020:1636)

The remote AlmaLinux 8 host has a package installed that is affected by multiple vulnerabilities as referenced in the ALSA-2020:1636 advisory. - A stack-based buffer overflow in psfmemset in common.c in libsndfile 1.0.28 allows remote attackers to cause a denial of service application crash or...

8.8CVSS7.3AI score0.03574EPSS
SaveExploits1References3
Redos
Redos
•added 2022/01/14 12:00 a.m.•25 views

ROS-20220114-02

Vulnerability in Mozilla Thunderbird email client, related to memory usage after memory freeing due to a race condition when playing audio files. Exploitation of the vulnerability could allow an attacker acting remotely to create a specially crafted audio shell, trigger a post-release usage error...

10CVSS9.2AI score0.01381EPSS
SaveExploits6
OSV
OSV
•added 2022/01/07 12:10 a.m.•20 views

GHSA-5F5C-687X-G5QM Classic Buffer Overflow in pyo

Buffer Overflow Vulnerability exists in ajaxsoundstudio.com in Pyo 1.03 in the Serverdebug function, which allows remote attackers to conduct DoS attacks by deliberately passing on an overlong audio file name...

7.5CVSS7.3AI score0.01407EPSS
SaveExploits1References3
BDU FSTEC
BDU FSTEC
•added 2021/12/28 12:00 a.m.•17 views

The vulnerability of Adobe Premiere Rush software, related to the execution of operations beyond buffer boundaries in memory, allows attackers to execute arbitrary code.

The vulnerability of Adobe Premiere Rush relates to the execution of operations beyond the buffer in memory when processing M4A files. Exploiting this vulnerability can allow an attacker to execute arbitrary code...

7.8CVSS7.9AI score0.02348EPSS
SaveExploits0References4Affected Software1
Rows per page
Query Builder