Lucene search
+L

261 matches found

Zero Day Initiative
Zero Day Initiative
•added 2022/02/10 12:00 a.m.•90 views

(Pwn2Own) Sonos One Speaker ALAC Frame Parser Stack-based Buffer Overflow Remote Code Execution Vulnerability

This vulnerability allows remote attackers to execute arbitrary code on affected installations of Sonos One Speaker. Authentication is not required to exploit this vulnerability. The specific flaw exists within the ALAC audio codec. The issue results from the lack of proper validation of the leng...

9.8CVSS5.8AI score0.07212EPSS
SaveExploits0
CNVD
CNVD
•added 2021/11/11 12:00 a.m.•23 views

Speex Dezero Error Vulnerability

Speex is an open source audio codec. version 1.2 of Speex is vulnerable to a divide by zero error in the static int readsamples function. An attacker can exploit the vulnerability to cause a denial of service via a specially crafted WAV file...

5.5CVSS4.5AI score0.01011EPSS
SaveExploits1References1
CNVD
CNVD
•added 2021/09/22 12:00 a.m.•61 views

SELA heap buffer overflow vulnerability

SELA is a lossless audio codec. a heap buffer overflow vulnerability exists in file::WavFile::writeToFile in wavfile.c in SELA 20200412 and earlier versions. No detailed vulnerability details are currently available...

7.8CVSS3.5AI score0.00764EPSS
SaveExploits1References1
CNVD
CNVD
•added 2021/09/22 12:00 a.m.•49 views

SELA Heap Buffer Overflow Vulnerability (CNVD-2021-73935)

SELA is a lossless audio codec. file::SelaFile::readFromFile in selafile.cpp in SELA 20200412 and earlier versions is vulnerable to a heap buffer overflow. No detailed vulnerability details are currently available...

7.8CVSS3.7AI score0.00764EPSS
SaveExploits1References1
CNVD
CNVD
•added 2021/09/22 12:00 a.m.•43 views

SELA null pointer dereference vulnerability (CNVD-2021-73934)

SELA is a lossless audio codec. A null pointer dereference vulnerability exists in the file::WavFile::WavFile function in wavfile.c in SELA 20200412 and earlier versions. An attacker could exploit this vulnerability to cause a denial of service...

5.5CVSS4.2AI score0.00635EPSS
SaveExploits1References1
CNVD
CNVD
•added 2021/09/22 12:00 a.m.•57 views

SELA Heap Buffer Overflow Vulnerability (CNVD-2021-73936)

SELA is a lossless audio codec. file::SelaFile::readFromFile in selafile.c in SELA 20200412 and earlier versions is vulnerable to a heap buffer overflow. No detailed vulnerability details are available at this time...

7.8CVSS3.7AI score0.00764EPSS
SaveExploits1References1
CNVD
CNVD
•added 2021/09/22 12:00 a.m.•51 views

SELA null pointer dereference vulnerability (CNVD-2021-73930)

SELA is a lossless audio codec. a null pointer dereference vulnerability exists in the rice::RiceDecoder::process function in ricedecoder.c in SELA 20200412 and earlier versions. An attacker can exploit this vulnerability to cause a denial of service...

5.5CVSS4.6AI score0.00635EPSS
SaveExploits1References1
CNVD
CNVD
•added 2021/09/22 12:00 a.m.•45 views

SELA null pointer dereference vulnerability (CNVD-2021-73933)

SELA is a lossless audio codec. A null pointer dereference vulnerability exists in the frame::FrameDecoder::process function in framedecoder.c in SELA 20200412 and earlier versions. An attacker can exploit this vulnerability to cause a denial of service...

5.5CVSS4.5AI score0.00635EPSS
SaveExploits1References1
CNVD
CNVD
•added 2021/09/22 12:00 a.m.•43 views

SELA null pointer dereference vulnerability (CNVD-2021-73932)

SELA is a lossless audio codec. lpc::SampleGenerator::process function in samplegenerator.cpp in SELA 20200412 and earlier versions is vulnerable to a null pointer dereference. An attacker could exploit this vulnerability to cause a denial of service...

5.5CVSS4.3AI score0.00635EPSS
SaveExploits1References1
CNNVD
CNNVD
•added 2021/09/20 12:00 a.m.•14 views

Sela 缓冲区错误漏洞

Sela is a lossless audio codec. A security vulnerability exists in sela, which stems from a heap-based buffer overflow in file::WavFile::writeToFile in wav file.c. The vulnerability is caused by a heap-based buffer overflow in file::WavFile::writeToFile...

7.8CVSS7.6AI score0.00764EPSS
SaveExploits1References2
CNNVD
CNNVD
•added 2021/09/20 12:00 a.m.•13 views

Faad2 缓冲区错误漏洞

Freeware Advanced Audio Decoder 2 FAAD2 is an open source MPEG-4 and MPEG-2 AAC decoder licensed under the GPLv2 license. a stack buffer overflow vulnerability exists in the ftypin function in mp4read.c in FAAD2 2.10.0 and earlier versions. An attacker could exploit this vulnerability to execute...

7.8CVSS7.8AI score0.0115EPSS
SaveExploits1References7
BDU FSTEC
BDU FSTEC
•added 2021/07/07 12:00 a.m.•10 views

The vulnerability of the WavpackSetConfiguration64 function in the packUtils.c component of the WavPack audio codec allows a hacker to trigger a service failure by accessing an uninitialized pointer.

The vulnerability of the WavPack audio codec relates to the access to an uninitialized pointer. Exploiting this vulnerability allows a remote attacker to trigger a service failure using a DFF file without proper frequency information...

6.5CVSS6.3AI score0.03044EPSS
SaveExploits1References10Affected Software3
BDU FSTEC
BDU FSTEC
•added 2021/07/06 12:00 a.m.•54 views

The vulnerability of the FLAC__bitreader_read_rice_signed_block function in the bitreader.c component of the FLAC audio codec, related to reading data beyond the allowed buffer limits, allows a hacker to cause a service failure.

The vulnerability of the FLACbitreaderreadricesignedblock function in the bitreader.c component of the FLAC audio codec is related to reading data beyond the allowed buffer limits. Exploiting this vulnerability allows a remote attacker to cause service interruptions...

4.3CVSS5.7AI score0.04136EPSS
SaveExploits0References14Affected Software5
OpenVAS
OpenVAS
•added 2021/02/25 12:00 a.m.•37 views

Fedora: Security Advisory for mingw-flac (FEDORA-2021-ed9c13a1d5)

The remote host is missing an update for the Copyright C 2021 Greenbone Networks GmbH Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-or-later This program is free software; you can...

5.4AI score
SaveExploits0References2
OpenVAS
OpenVAS
•added 2021/02/25 12:00 a.m.•30 views

Fedora: Security Advisory for mingw-flac (FEDORA-2021-a48ccc6754)

The remote host is missing an update for the Copyright C 2021 Greenbone Networks GmbH Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-or-later This program is free software; you can...

5.4AI score
SaveExploits0References2
Fedora
Fedora
•added 2021/02/24 8:46 p.m.•72 views

[SECURITY] Fedora 32 Update: mingw-flac-1.3.3-1.fc32

FLAC stands for Free Lossless Audio Codec. Grossly oversimplified, FLAC is similar to Ogg Vorbis, but lossless. The FLAC project consists of the stream format, reference encoders and decoders in library form, flac, a command-line program to encode and decode FLAC files, metaflac, a command-line...

5.5CVSS4.1AI score0.04136EPSS
SaveExploits0
Fedora
Fedora
•added 2021/02/24 8:42 p.m.•67 views

[SECURITY] Fedora 33 Update: mingw-flac-1.3.3-1.fc33

FLAC stands for Free Lossless Audio Codec. Grossly oversimplified, FLAC is similar to Ogg Vorbis, but lossless. The FLAC project consists of the stream format, reference encoders and decoders in library form, flac, a command-line program to encode and decode FLAC files, metaflac, a command-line...

5.5CVSS4.1AI score0.04136EPSS
SaveExploits0
OpenVAS
OpenVAS
•added 2021/01/11 12:00 a.m.•37 views

Fedora: Security Advisory for flac (FEDORA-2021-df42ebeac2)

The remote host is missing an update for the Copyright C 2021 Greenbone Networks GmbH Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-or-later This program is free software; you can...

4.3CVSS5.1AI score0.04136EPSS
SaveExploits0References2
Fedora
Fedora
•added 2021/01/10 1:28 a.m.•94 views

[SECURITY] Fedora 33 Update: flac-1.3.3-4.fc33

FLAC stands for Free Lossless Audio Codec. Grossly oversimplified, FLAC is similar to Ogg Vorbis, but lossless. The FLAC project consists of the stream format, reference encoders and decoders in library form, flac, a command-line program to encode and decode FLAC files, metaflac, a command-line...

4.3CVSS4AI score0.04136EPSS
SaveExploits0
Ubuntu
Ubuntu
•added 2021/01/06 1:24 p.m.•126 views

USN-4682-1: WavPack vulnerability

It was discovered that WavPack incorrectly handled certain WAV files. An attacker could possibly use this issue to execute arbitrary code or cause a crash...

6.1CVSS7.2AI score0.01211EPSS
SaveExploits1
Rows per page
Query Builder