MP3Gain 'apetag.c' Memory Corruption Vulnerability

MP3Gain is a volume adjustment application for MP3 files. A security vulnerability exists in the apetag.c file in MP3Gain version 1.5.2.r2. The vulnerability can be exploited to corrupt stack memory with the help of specially crafted MP3 files...

Libav Denial of Service Vulnerability (CNVD-2018-07429)

Libav is an open source audio and video processing tools , providing for conversion , manipulation and streaming of various multimedia formats and protocols cross-platform tools and libraries . A denial of service vulnerability exists in the stereoprocessing function in libavcodec/aacps.c in Liba...

aubio 'new_aubio_source_wavread()' function denial of service vulnerability

aubio is an open source audio analysis tool written in C. A security vulnerability exists in the 'newaubiosourcewavread' function in the sourcewavread.c file in aubio version 0.4.6. An attacker can exploit this vulnerability to cause a denial of service except for a zero error with the help of...

CVE-2017-16951

Winamp Pro 5.66 Build 3512 allows remote attackers to cause a denial of service via a crafted WAV, WMV, AU, ASF, AIFF, or AIF file...

aubio denial of service vulnerability

aubio is an open source audio analysis tool written in C. A security vulnerability exists in the 'aubiosourceavcodecreadframe' function in the io/sourceavcodec.c file in version 0.4.6 of aubio. The vulnerability can be exploited to cause a denial of service null pointer backreference with the hel...

libsndfile 'double64_init()' function denial of service vulnerability

libsndfile is a C library developed by software developer Erik de Castro Lopo that reads and writes audio files in AIFF, AU, and WAV formats through standard interfaces. A security vulnerability exists in the 'double64init' function of the double64.c file in libsndfile version 1.0.28. An attacker...

TagLib 'rebuildAggregateFrames' Function Denial of Service Vulnerability

TagLib is a library for reading and editing audio files such as WAV. A security vulnerability exists in the 'rebuildAggregateFrames' function in the id3v2framefactory.cpp file in TagLib version 1.11.1. A remote attacker can exploit this vulnerability to cause a denial of service with specially...

Apple macOS Sierra afclip memory corruption vulnerability (CNVD-2017-16965)

Apple macOS Sierra is a dedicated operating system developed by Apple for Mac computers. afclip component is one of the file validation analysis components. A memory corruption vulnerability exists in the afclip component in Apple macOS Sierra versions prior to 10.12.6. A remote attacker can...

Apple macOS Sierra afclip memory corruption vulnerability

Apple macOS Sierra is a dedicated operating system developed by Apple for Mac computers. afclip component is one of the file validation analysis components. A memory corruption vulnerability exists in the afclip component in Apple macOS Sierra versions prior to 10.12.6. A remote attacker can...

CVE-2017-7015

An issue was discovered in certain Apple products. macOS before 10.12.6 is affected. The issue involves the "Audio" component. It allows remote attackers to obtain sensitive information from process memory or cause a denial of service memory corruption via a crafted audio file...

ALPINE-CVE-2017-11399

Integer overflow in the apedecodeframe function in libavcodec/apedec.c in FFmpeg 2.4 through 3.3.2 allows remote attackers to cause a denial of service out-of-array access and application crash or possibly have unspecified other impact via a crafted APE file...

LAME 'III_i_stereo' Denial of Service Vulnerability

LAME is LAME team developed a set of open source MP3 audio compression software. mpglib is one of the mpg decoding library . A security vulnerability exists in the 'IIIistereo' function in the layer3.c file of mpglib in LAME version 3.99.5 and other products. A remote attacker can exploit this...

LAME lame_init_params function denial of service vulnerability

LAME is LAME team developed a set of open source MP3 audio compression software . A security vulnerability exists in the 'lameinitparams' function in the lame.c file of the libmp3lame.a file in LAME version 3.99.5. A remote attacker can exploit this vulnerability to cause a denial of service...

Design/Logic Flaw

The IIIistereo function in layer3.c in mpglib, as used in libmpgdecoder.a in LAME 3.99.5 and other products, allows remote attackers to cause a denial of service buffer over-read and application crash via a crafted audio file that is mishandled in the code for the "blocktype == 2" case, a similar...

Underbit libmad 'mad_layer_III' Denial of Service Vulnerability

MAD libmad is a high quality MPEG audio decoder. A denial of service vulnerability exists in the madlayerIII function in layer3.c in Underbit MAD. A remote attacker could use this vulnerability to cause a denial of service buffer overflow and application crash or other impact via specially design...

libsndfile buffer overflow vulnerability (CNVD-2017-07022)

libsndfile is a C library developed by software developer Erik de Castro Lopo that reads and writes audio files in AIFF, AU, and WAV formats through standard interfaces. A buffer overflow vulnerability in the flacbuffercopy function in the flac.c file in version 1.0.28 of libsndfile. A remote...

libsndfile Buffer Overflow Vulnerability

libsndfile is a C library developed by software developer Erik de Castro Lopo that reads and writes audio files in AIFF, AU, and WAV formats through standard interfaces. A buffer overflow vulnerability exists in the flacbuffercopy function of the flac.c file in libsndfile version 1.0.28. A remote...

PT-2017-17835 · Fraunhofer Iis · He-Aac+ Codec

Name of the Vulnerable Software and Affected Versions: HE-AAC+ Codec aka libaacplus version 2.0.2 Description: The issue is related to a left-shift undefined behavior in the au channel.h file, which could allow remote attackers to cause a denial of service, potentially leading to an application...

USN-3241-1 audiofile vulnerabilities

Agostino Sarubbo discovered that audiofile incorrectly handled certain malformed audio files. If a user or automated system were tricked into processing a specially crafted audio file, a remote attacker could cause applications linked against audiofile to crash, leading to a denial of service, or...

The vulnerability of Thunderbird software, which allows a malicious actor to compromise the confidentiality, integrity, and accessibility of protected information.

A vulnerability exists in the mozilla::dom::AudioBufferSourceNodeEngine::CopyFromInputBuffer function in Mozilla Firefox and Thunderbird, due to improper handling of Web Audio’s buffer memory allocation. Exploitation of this vulnerability allows malicious actors to execute arbitrary code or cause...