CVE-2022-24599

In autofile Audio File Library 0.3.6, there exists one memory leak vulnerability in printfileinfo, in printinfo.c, which allows an attacker to leak sensitive information via a crafted file. The printfileinfo function calls the copyrightstring function to get data, however, it dosn't use zero byte...

CVE-2022-24599: Missing Release of Memory after Effective Lifetime

In autofile Audio File Library 0.3.6, there exists one memory leak vulnerability in printfileinfo, in printinfo.c, which allows an attacker to leak sensitive information via a crafted file. The printfileinfo function calls the copyrightstring function to get data, however, it dosn't use zero byte...

CVE-2022-24599

CVE-2022-24599 concerns memory leak in autofile Audio File Library 0.3.6, specifically in printfileinfo() where the copyrightstring data is not properly truncated with zero bytes, potentially allowing leakage of sensitive information via a crafted file. Connected advisories confirm the issue acro...

CVE-2022-24599

In autofile Audio File Library 0.3.6, there exists one memory leak vulnerability in printfileinfo, in printinfo.c, which allows an attacker to leak sensitive information via a crafted file. The printfileinfo function calls the copyrightstring function to get data, however, it dosn't use zero byte...

PT-2022-16746

Name of the Vulnerable Software and Affected Versions autofile Audio File Library version 0.3.6 Description The issue is related to a memory leak in the printfileinfo function, located in printinfo.c, which can be exploited by an attacker to leak sensitive information via a crafted file. This...

Cross-site Scripting in showdoc

Stored XSS via upload attachment with format .svg in File Library...

GHSA-7X22-PMW5-66MQ Cross-site Scripting in showdoc

Stored XSS via upload attachment with format .svg in File Library...

PT-2022-11468

Name of the Vulnerable Software and Affected Versions showdoc versions prior to 2.10.2 Description The issue is related to a Stored Cross-site Scripting XSS vulnerability. It can be exploited via upload attachment with format .svg in the File Library. Recommendations For versions prior to 2.10.2,...

Cross-site Scripting (XSS) - Stored in star7th/showdoc

Description Stored XSS via upload attachment with format .svg in File Library. Detail When opening the attachment, some format files will be rendered and loaded on the browser. So it allows executing arbitrary javascript code that was injected into attachment before. Proof of Concept PoC.svg var...

STB security vulnerabilities

stb is a single-file public domain library for C/C. stbimage.h is one of the image loaders. stb stbimage.h is vulnerable, and an attacker could use stbimage to crash the service or read up to 1024 bytes of non-contiguous heap data without controlling where it is read...

UBUNTU-CVE-2020-19497

Integer overflow vulnerability in MatVarReadNextInfo5 in mat5.c in tbeu matio aka MAT File I/O Library 1.5.17, allows attackers to cause a Denial of Service or possibly other unspecified impacts...

OESA-2021-1040 audiofile security update

The Audio File Library is a C-based library for reading and writing audio files in many common formats. The Audio File Library provides a uniform API which abstracts away details of file formats and data formats. The same calls for opening a file, accessing and manipulating audio metadata e.g...

audiofile: NULL pointer dereference in ModuleState::setup() in modules/ModuleState.cpp allows for denial of service via crafted file

The audiofile Audio File Library 0.3.6 has a NULL pointer dereference bug in ModuleState::setup in modules/ModuleState.cpp, which allows an attacker to cause a denial of service via a crafted caf file, as demonstrated by sfconvert...

CVE-2020-12840

ismartgate PRO 1.5.9 is vulnerable to CSRF that allows remote attackers to upload sound files via /index.php...

zipfile Python Package DoS

The vulnerability of the zipfile library for working with ZIP files in Python-related software packages is related to an uncontrolled resource consumption. Exploiting this vulnerability can allow a malicious actor to cause service interruptions using a malicious ZIP archive known as a “ZIP bomb”...

Audio File Library Buffer Overflow Vulnerability

Audio File Library aka audiofile is an audio file library. A buffer overflow vulnerability exists in the 'afReadFrames' function in Audio File Library. The vulnerability stems from a networked system or product performing operations in memory without properly validating data boundaries, resulting...

Buffer overflow

Buffer overflow in the afReadFrames function in audiofile aka libaudiofile and Audio File Library allows user-assisted remote attackers to cause a denial of service program crash or possibly execute arbitrary code via a crafted audio file, as demonstrated by sixteen-stereo-to-eight-mono.c...

CVE-2015-7747

CVE-2015-7747 affects the Audio File Library (audiofile/libaudiofile). The vulnerability is a buffer overflow in afReadFrames that can be triggered by a crafted audio file, potentially causing a denial of service or arbitrary code execution. The issue is corroborated across multiple feeds (includ...

CVE-2015-7747: Buffer Copy without Checking Size of Input

Buffer overflow in the afReadFrames function in audiofile aka libaudiofile and Audio File Library allows user-assisted remote attackers to cause a denial of service program crash or possibly execute arbitrary code via a crafted audio file, as demonstrated by sixteen-stereo-to-eight-mono.c...

Huawei EulerOS: Security Advisory for libgsf (EulerOS-SA-2019-2240)

The remote host is missing an update for the Huawei EulerOS SPDX-FileCopyrightText: 2020 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...