51 matches found
CVE-2019-18794
Affected software: BASS Audio Library 2.4.14 on Windows. Vulnerability: BASS_StreamCreateFile Use after Free triggered by a crafted .ogg file. Impact: information disclosure and potential for further attacks; exploitation failure may cause denial of service. Root cause: use-after-free in the vuln...
CVE-2020-9815
An out-of-bounds read was addressed with improved bounds checking. This issue is fixed in iOS 13.5 and iPadOS 13.5, macOS Catalina 10.15.5, tvOS 13.4.5, watchOS 6.2.5. Processing a maliciously crafted audio file may lead to arbitrary code execution...
@4players/odin-bot-sdk (>=0.1.0 <=0.4.4), @bhznjns/node-mp3-player (>=1.0.0 <=1.3.3) +39 more potentially affected by CVE-2020-7615 via fsa (>=0.3.1 <=0.5.1)
fsa NPM version =0.3.1, =0.1.0, =1.0.0, =1.0.0, =0.0.5, =0.0.1, =1.0.0, =0.0.1, =0.0.2, =1.2.2, =0.1.0, =1.0.4, =0.1.0, =0.1.0, =1.0.0, =2.0.0 - chiasenhac-music-bot =1.0.0 and more Source cves: CVE-2020-7615 Source advisory: SNYK:JS-FSA-564118...
The vulnerability of the ulaw2linear_buf function in the audio file library allows a perpetrator to cause a service failure.
The vulnerability of the ulaw2linearbuf function in the Audio File Library library is related to pointer manipulation errors. Exploiting this vulnerability can allow a malicious actor to cause service interruptions using a specially created file...
libopenmpt Input Validation Error Vulnerability (CNVD-2020-22392)
libopenmpt is a cross-platform C and C++ based audio library that decodes audio files into raw PCM audio streams. An input validation error vulnerability exists in libopenmpt. No details of the vulnerability are available at this time...
SDL (Simple DirectMedia Layer) Buffer Overflow Vulnerability (CNVD-2019-29170)
Simple DirectMedia Layer SDL is a multi-platform library for accessing low-level hardware and graphics and providing support for games, software and emulators. A heap-based buffer overflow vulnerability exists in the 'IMAADPCMdecode' function of the audio/SDLwave.c file in SDL versions prior to...
UBUNTU-CVE-2019-7575
SDL Simple DirectMedia Layer through 1.2.15 and 2.x through 2.0.9 has a heap-based buffer overflow in MSADPCMdecode in audio/SDLwave.c...
libao 1.2.0 - Denial of Service Exploit
Exploit for linux platform in category dos / poc libao memory corruption vulnerability ================ Author : qflb.wu =============== Introduction: ============= Libao is a cross-platform audio library that allows programs to output audio using a simple API on a wide variety of platforms...
[SECURITY] [DLA 1017-1] mpg123 security update
Package : mpg123 Version : 1.14.4-1+deb7u2 CVE ID : CVE-2017-10683 Debian Bug : 866860 It was discovered that there was a remote denial of service vulnerability in the mpg123 audio library/player. This was caused by a heap-based buffer over-read in the "convertlatin1" function. For Debian 7...
libsndfile 'src/common.c' stack buffer overflow vulnerability
libsndfile is a C library that reads and writes audio files in AIFF, AU, and WAV formats through a standard interface. A stack buffer overflow vulnerability exists in libsndfile 'src/common.c'. An attacker can exploit this vulnerability to cause a stack buffer overflow with the help of a speciall...
CVE-2016-4702
Audio in Apple iOS before 10, OS X before 10.12, tvOS before 10, and watchOS before 3 allows remote attackers to execute arbitrary code or cause a denial of service memory corruption via unspecified vectors...