CVE-2019-19513

The CVE-2019-19513 entry concerns the BASSMIDI plugin 2.4.12.1 for the Un4seen BASS Audio Library on Windows, which is affected by an out-of-bounds write vulnerability. The issue could allow an attacker to execute code on the target system, with a denial of service risk if exploitation fails. Pub...

CVE-2019-18796

The vulnerability CVE-2019-18796 affects the BASS Audio Library 2.4.14 on Windows, where a crafted MP3 file can trigger a Denial of Service in BASS_StreamCreateFile due to an infinite loop, causing excessive CPU usage and making the application unresponsive. The available connected sources corrob...

CVE-2019-18796

The BASS Audio Library 2.4.14 under Windows is prone to a BASSStreamCreateFile Denial of Service vulnerability infinite loop via a crafted .mp3 file. This weakness could allow attackers to consume excessive CPU and the application becomes unresponsive...

CVE-2019-18795

The CVE-2019-18795 issue affects the BASS Audio Library 2.4.14 on Windows. It describes an out-of-bounds read in BASS_StreamCreateFile triggered by a crafted WAV file, enabling an attacker to read sensitive information and potentially aid further attacks; exploitation may also cause denial of ser...

CVE-2019-18795

The BASS Audio Library 2.4.14 under Windows is prone to a BASSStreamCreateFile out of bounds read vulnerability via a crafted .wav file. An attacker can exploit this issues to gain access to sensitive information that may aid in further attacks. A failure in exploitation leads to denial of servic...

CVE-2019-18794

Affected software: BASS Audio Library 2.4.14 on Windows. Vulnerability: BASS_StreamCreateFile Use after Free triggered by a crafted .ogg file. Impact: information disclosure and potential for further attacks; exploitation failure may cause denial of service. Root cause: use-after-free in the vuln...

CVE-2019-18794

The BASS Audio Library 2.4.14 under Windows is prone to a BASSStreamCreateFile Use after Free vulnerability via a crafted .ogg file. An attacker can exploit this to gain access to sensitive information that may aid in further attacks. A failure in exploitation leads to denial of service...

CVE-2019-19513: Out-of-bounds Write

The BASSMIDI plugin 2.4.12.1 for Un4seen BASS Audio Library on Windows is prone to an out of bounds write vulnerability. An attacker may exploit this to execute code on the target machine. A failure in exploitation leads to a denial of service...

CVE-2019-18796: Loop with Unreachable Exit Condition

The BASS Audio Library 2.4.14 under Windows is prone to a BASSStreamCreateFile Denial of Service vulnerability infinite loop via a crafted .mp3 file. This weakness could allow attackers to consume excessive CPU and the application becomes unresponsive...

CVE-2019-18795: Out-of-bounds Read

The BASS Audio Library 2.4.14 under Windows is prone to a BASSStreamCreateFile out of bounds read vulnerability via a crafted .wav file. An attacker can exploit this issues to gain access to sensitive information that may aid in further attacks. A failure in exploitation leads to denial of servic...

CVE-2019-18794: Use After Free

The BASS Audio Library 2.4.14 under Windows is prone to a BASSStreamCreateFile Use after Free vulnerability via a crafted .ogg file. An attacker can exploit this to gain access to sensitive information that may aid in further attacks. A failure in exploitation leads to denial of service...

CVE-2020-9815

An out-of-bounds read was addressed with improved bounds checking. This issue is fixed in iOS 13.5 and iPadOS 13.5, macOS Catalina 10.15.5, tvOS 13.4.5, watchOS 6.2.5. Processing a maliciously crafted audio file may lead to arbitrary code execution...

The vulnerability of the ulaw2linear_buf function in the audio file library allows a perpetrator to cause a service failure.

The vulnerability of the ulaw2linearbuf function in the Audio File Library library is related to pointer manipulation errors. Exploiting this vulnerability can allow a malicious actor to cause service interruptions using a specially created file...

libopenmpt Input Validation Error Vulnerability (CNVD-2020-22392)

libopenmpt is a cross-platform C and C++ based audio library that decodes audio files into raw PCM audio streams. An input validation error vulnerability exists in libopenmpt. No details of the vulnerability are available at this time...

SDL (Simple DirectMedia Layer) Buffer Overflow Vulnerability (CNVD-2019-29170)

Simple DirectMedia Layer SDL is a multi-platform library for accessing low-level hardware and graphics and providing support for games, software and emulators. A heap-based buffer overflow vulnerability exists in the 'IMAADPCMdecode' function of the audio/SDLwave.c file in SDL versions prior to...

UBUNTU-CVE-2019-7575

SDL Simple DirectMedia Layer through 1.2.15 and 2.x through 2.0.9 has a heap-based buffer overflow in MSADPCMdecode in audio/SDLwave.c...

libao 1.2.0 - Denial of Service Exploit

Exploit for linux platform in category dos / poc libao memory corruption vulnerability ================ Author : qflb.wu =============== Introduction: ============= Libao is a cross-platform audio library that allows programs to output audio using a simple API on a wide variety of platforms...

[SECURITY] [DLA 1017-1] mpg123 security update

Package : mpg123 Version : 1.14.4-1+deb7u2 CVE ID : CVE-2017-10683 Debian Bug : 866860 It was discovered that there was a remote denial of service vulnerability in the mpg123 audio library/player. This was caused by a heap-based buffer over-read in the "convertlatin1" function. For Debian 7...

libsndfile 'src/common.c' stack buffer overflow vulnerability

libsndfile is a C library that reads and writes audio files in AIFF, AU, and WAV formats through a standard interface. A stack buffer overflow vulnerability exists in libsndfile 'src/common.c'. An attacker can exploit this vulnerability to cause a stack buffer overflow with the help of a speciall...

CVE-2016-4702

Audio in Apple iOS before 10, OS X before 10.12, tvOS before 10, and watchOS before 3 allows remote attackers to execute arbitrary code or cause a denial of service memory corruption via unspecified vectors...