Lucene search
+L

8003 matches found

Debian CVE
Debian CVE
added 2024/04/17 12:00 a.m.41 views

CVE-2024-31582

FFmpeg version n6.1 was discovered to contain a heap buffer overflow vulnerability in the drawblockrectangle function of libavfilter/vfcodecview.c. This vulnerability allows attackers to cause undefined behavior or a Denial of Service DoS via crafted input...

7.8CVSS6.7AI score0.00347EPSS
SaveExploits0
CNVD
CNVD
added 2024/04/16 12:00 a.m.36 views

FFmpeg buffer overflow vulnerability (CNVD-2024-29685)

FFmpeg is a complete solution for recording, converting and streaming audio and video from the FFmpeg team. A buffer overflow vulnerability exists in FFmpeg version n6.1-3-g466799d4f5, which can be exploited by an attacker to execute arbitrary code and cause a denial of service DoS via...

8CVSS8AI score0.00396EPSS
SaveExploits1References1
SUSE CVE
SUSE CVE
added 2024/04/13 2:12 a.m.4 views

SUSE CVE-2023-49528

Buffer Overflow vulnerability in FFmpeg version n6.1-3-g466799d4f5, allows a local attacker to execute arbitrary code and cause a denial of service DoS via the afdialoguenhance.c:261:5 in the destereo component...

8.2CVSS7.1AI score0.00396EPSS
SaveExploits1References3
Veracode
Veracode
added 2024/04/12 12:31 p.m.26 views

Command Injection

github.com/go-skynet/localai is vulnerable to command injection. The vulnerability is due to the lack of sanitization of user-supplied filenames before passing them to ffmpeg via a shell command in the audioToWav function, allowing attackers to execute arbitrary commands on the host system...

9.8CVSS8.3AI score0.02879EPSS
SaveExploits1References3Affected Software1
NVD
NVD
added 2024/04/12 6:15 a.m.18 views

CVE-2023-49528

Buffer Overflow vulnerability in FFmpeg version n6.1-3-g466799d4f5, allows a local attacker to execute arbitrary code and cause a denial of service DoS via the afdialoguenhance.c:261:5 in the destereo component...

8CVSS9.2AI score0.00396EPSS
SaveExploits1References7
OSV
OSV
added 2024/04/12 6:15 a.m.1 views

DEBIAN-CVE-2023-49528

Buffer Overflow vulnerability in FFmpeg version n6.1-3-g466799d4f5, allows a local attacker to execute arbitrary code and cause a denial of service DoS via the afdialoguenhance.c:261:5 in the destereo component...

8CVSS7.3AI score0.00396EPSS
SaveExploits1References1
UbuntuCve
UbuntuCve
added 2024/04/12 6:15 a.m.23 views

CVE-2023-49528

Buffer Overflow vulnerability in FFmpeg version n6.1-3-g466799d4f5, allows a local attacker to execute arbitrary code and cause a denial of service DoS via the afdialoguenhance.c:261:5 in the destereo component...

8CVSS7.1AI score0.00396EPSS
SaveExploits1References3
OSV
OSV
added 2024/04/12 6:15 a.m.11 views

UBUNTU-CVE-2023-49528

Buffer Overflow vulnerability in FFmpeg version n6.1-3-g466799d4f5, allows a local attacker to execute arbitrary code and cause a denial of service DoS via the afdialoguenhance.c:261:5 in the destereo component...

8CVSS7.1AI score0.00396EPSS
SaveExploits1References4
Vulnrichment
Vulnrichment
added 2024/04/12 12:00 a.m.18 views

CVE-2023-49528

Buffer Overflow vulnerability in FFmpeg version n6.1-3-g466799d4f5, allows a local attacker to execute arbitrary code and cause a denial of service DoS via the afdialoguenhance.c:261:5 in the destereo component...

7.5AI score0.00396EPSS
SaveExploits1References4
Positive Technologies
Positive Technologies
added 2024/04/12 12:00 a.m.8 views

PT-2024-4526 · FFmpeg +4 · Ffmpeg +4

Name of the Vulnerable Software and Affected Versions: FFmpeg version n6.1-3-g466799d4f5 Description: The issue is related to a buffer overflow in the de stereo component of the FFmpeg library, specifically in the af dialoguenhance.c file. This allows a local attacker to execute arbitrary code an...

8.8CVSS7.3AI score0.01545EPSS
SaveExploits7References92
OSV
OSV
added 2024/04/12 12:00 a.m.13 views

CVE-2023-49528

Buffer Overflow vulnerability in FFmpeg version n6.1-3-g466799d4f5, allows a local attacker to execute arbitrary code and cause a denial of service DoS via the afdialoguenhance.c:261:5 in the destereo component...

8CVSS8AI score
SaveExploits0References9
Debian CVE
Debian CVE
added 2024/04/12 12:00 a.m.67 views

CVE-2023-49528

Buffer Overflow vulnerability in FFmpeg version n6.1-3-g466799d4f5, allows a local attacker to execute arbitrary code and cause a denial of service DoS via the afdialoguenhance.c:261:5 in the destereo component...

8CVSS7AI score0.00396EPSS
SaveExploits1
CNNVD
CNNVD
added 2024/04/12 12:00 a.m.12 views

FFmpeg 安全漏洞

FFmpeg is a complete solution for recording, converting and streaming audio and video from the FFmpeg team. A buffer overflow vulnerability exists in FFmpeg version n6.1-3-g466799d4f5, which can be exploited by an attacker to execute arbitrary code and cause a denial of service DoS via...

8CVSS7.9AI score0.00396EPSS
SaveExploits1References2
CVE
CVE
added 2024/04/12 12:00 a.m.101 views

CVE-2023-49528

CVE-2023-49528 : FFmpeg has a local, buffer overflow in the de_stereo path (af_dialoguenhance.c:261) on version n6.1-3-g466799d4f5, enabling arbitrary code execution and DoS. Connected advisories confirm the vulnerability in FFmpeg’s af_dialoguenhance.c and note affected builds across distributio...

8CVSS7.2AI score0.00396EPSS
SaveExploits1References7Affected Software1
Cvelist
Cvelist
added 2024/04/12 12:00 a.m.43 views

CVE-2023-49528

Buffer Overflow vulnerability in FFmpeg version n6.1-3-g466799d4f5, allows a local attacker to execute arbitrary code and cause a denial of service DoS via the afdialoguenhance.c:261:5 in the destereo component...

9.3AI score0.00396EPSS
SaveExploits1References4
Github Security Blog
Github Security Blog
added 2024/04/10 6:30 p.m.35 views

LocalAI Command Injection in audioToWav

A command injection vulnerability exists in the TranscriptEndpoint of mudler/localai, specifically within the audioToWav function used for converting audio files to WAV format for transcription. The vulnerability arises due to the lack of sanitization of user-supplied filenames before passing the...

9.8CVSS8.1AI score0.02879EPSS
SaveExploits1References4Affected Software1
OSV
OSV
added 2024/04/10 6:30 p.m.57 views

GHSA-WX43-G55G-2JF4 LocalAI Command Injection in audioToWav

A command injection vulnerability exists in the TranscriptEndpoint of mudler/localai, specifically within the audioToWav function used for converting audio files to WAV format for transcription. The vulnerability arises due to the lack of sanitization of user-supplied filenames before passing the...

9.8CVSS9.8AI score0.02879EPSS
SaveExploits1References4
NVD
NVD
added 2024/04/10 5:15 p.m.24 views

CVE-2024-2029

A command injection vulnerability exists in the TranscriptEndpoint of mudler/localai, specifically within the audioToWav function used for converting audio files to WAV format for transcription. The vulnerability arises due to the lack of sanitization of user-supplied filenames before passing the...

9.8CVSS9.8AI score0.02879EPSS
SaveExploits1References2
Cvelist
Cvelist
added 2024/04/10 5:08 p.m.41 views

CVE-2024-2029 Command Injection in mudler/localai

A command injection vulnerability exists in the TranscriptEndpoint of mudler/localai, specifically within the audioToWav function used for converting audio files to WAV format for transcription. The vulnerability arises due to the lack of sanitization of user-supplied filenames before passing the...

9.8CVSS10AI score0.02879EPSS
SaveExploits1References2
OSV
OSV
added 2024/04/10 5:08 p.m.24 views

CVE-2024-2029 Command Injection in mudler/localai

A command injection vulnerability exists in the TranscriptEndpoint of mudler/localai, specifically within the audioToWav function used for converting audio files to WAV format for transcription. The vulnerability arises due to the lack of sanitization of user-supplied filenames before passing the...

9.8CVSS6.2AI score
SaveExploits0References4
Rows per page
Query Builder