Lucene search
+L

5 matches found

OSV
OSV
•added 2020/10/16 1:15 p.m.•16 views

CVE-2019-18796

The BASS Audio Library 2.4.14 under Windows is prone to a BASSStreamCreateFile Denial of Service vulnerability infinite loop via a crafted .mp3 file. This weakness could allow attackers to consume excessive CPU and the application becomes unresponsive...

6.5CVSS6.6AI score0.00932EPSS
SaveExploits0References2
CVE
CVE
•added 2020/10/16 12:51 p.m.•66 views

CVE-2019-18796

The vulnerability CVE-2019-18796 affects the BASS Audio Library 2.4.14 on Windows, where a crafted MP3 file can trigger a Denial of Service in BASS_StreamCreateFile due to an infinite loop, causing excessive CPU usage and making the application unresponsive. The available connected sources corrob...

7.1CVSS6.2AI score0.00932EPSS
SaveExploits0References2Affected Software1
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2020/10/16 12:00 a.m.•4 views

CVE-2019-18796: Loop with Unreachable Exit Condition

The BASS Audio Library 2.4.14 under Windows is prone to a BASSStreamCreateFile Denial of Service vulnerability infinite loop via a crafted .mp3 file. This weakness could allow attackers to consume excessive CPU and the application becomes unresponsive...

7.1CVSS5.9AI score0.00932EPSS
SaveExploits0References2
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2020/10/16 12:00 a.m.•5 views

CVE-2019-18794: Use After Free

The BASS Audio Library 2.4.14 under Windows is prone to a BASSStreamCreateFile Use after Free vulnerability via a crafted .ogg file. An attacker can exploit this to gain access to sensitive information that may aid in further attacks. A failure in exploitation leads to denial of service...

6.5CVSS5.9AI score0.01085EPSS
SaveExploits0References2
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2020/10/16 12:00 a.m.•5 views

CVE-2019-18795: Out-of-bounds Read

The BASS Audio Library 2.4.14 under Windows is prone to a BASSStreamCreateFile out of bounds read vulnerability via a crafted .wav file. An attacker can exploit this issues to gain access to sensitive information that may aid in further attacks. A failure in exploitation leads to denial of servic...

6.5CVSS5.8AI score0.0129EPSS
SaveExploits0References2
Rows per page
Query Builder