915 matches found
OSV-2020-990 UNKNOWN READ in FLAC__crc16_update_words32
OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=16457 Crash type: UNKNOWN READ Crash state: FLACcrc16updatewords32 crc16updateblock bitreaderreadfromclient...
Low: taglib
Issue Overview: The TagLib::Ogg::FLAC::File::scan function in oggflacfile.cpp in TagLib 1.11.1 allows remote attackers to cause information disclosure heap-based buffer over-read via a crafted audio file. CVE-2018-11439 Affected Packages: taglib Note: This advisory is applicable to Amazon Linux 2...
OSV-2020-819 Use-of-uninitialized-value in fuzzing::memory::memory_test_msan
OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=22224 Crash type: Use-of-uninitialized-value Crash state: fuzzing::memory::memorytestmsan fuzzing::memory::memorytest FLAC::Decoder::FuzzerStream::writecallback...
PT-2020-6915 · Flac +7 · Flac +7
Name of the Vulnerable Software and Affected Versions: flac versions prior to 1.4.0 Description: The issue is related to a buffer overflow in the bitwriter grow function of the FLAC audio codec, which can allow an attacker to execute arbitrary code. This can be achieved by providing crafted input...
flac:fuzzer_decoder: Use-of-uninitialized-value in fuzzing::memory::memory_test_msan
Project: https://github.com/xiph/flac.git Detailed Report: https://oss-fuzz.com/testcase?key=5769553180360704 Project: flac Fuzzing Engine: libFuzzer Fuzz Target: fuzzerdecoder Job Type: libfuzzermsanflac Platform Id: linux Crash Type: Use-of-uninitialized-value Crash Address: Crash State:...
Denial Of Service (DoS)
libsndfile is vulnerable to denial of service DoS. The vulnerability exists as an error in the flacbuffercopy function flac.c can be exploited to cause a segmentation violation with read memory access via a specially crafted FLAC file during a resample attempt, a similar issue to CVE-2017-7585...
Denial Of Service (DoS)
libsndfile is vulnerable to denial of service DoS. The vulnerability exists as an error in the flacbuffercopy function flac.c can be exploited to cause a segmentation violation with write memory access via a specially crafted FLAC file during a resample attempt, a similar issue to CVE-2017-7585...
FreeBSD : taglib -- heap-based buffer over-read via a crafted audio file (d3f3e818-8d10-11ea-8668-e0d55e2a8bf9)
Webin security lab - dbapp security Ltd reports : The TagLib::Ogg::FLAC::File::scan function in oggflacfile.cpp in TagLib 1.11.1 allows remote attackers to cause information disclosure heap-based buffer over-read via a crafted audio file. C Tenable Network Security, Inc. The descriptive text and...
taglib security update
1.8-8.20130218git - Fixed OOB read when loading invalid ogg flac file Resolves: bz1585260...
taglib: heap-based buffer over-read via a crafted audio file
The TagLib::Ogg::FLAC::File::scan function in oggflacfile.cpp in TagLib 1.11.1 allows remote attackers to cause information disclosure heap-based buffer over-read via a crafted audio file...
Huawei EulerOS: Security Advisory for flac (EulerOS-SA-2019-1451)
The remote host is missing an update for the Huawei EulerOS SPDX-FileCopyrightText: 2020 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...
Huawei EulerOS: Security Advisory for flac (EulerOS-SA-2019-2327)
The remote host is missing an update for the Huawei EulerOS SPDX-FileCopyrightText: 2020 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...
flac:fuzzer_encoder: Crash in FLAC__bitwriter_write_raw_uint32_nocheck
Project: https://github.com/xiph/flac.git Detailed Report: https://oss-fuzz.com/testcase?key=5770150330761216 Project: flac Fuzzing Engine: libFuzzer Fuzz Target: fuzzerencoder Job Type: libfuzzerasani386flac Platform Id: linux Crash Type: UNKNOWN WRITE Crash Address: 0xb6e29a2c Crash State:...
flac:fuzzer_encoder: Crash in FLAC__bitwriter_free
Project: https://github.com/xiph/flac.git Detailed Report: https://oss-fuzz.com/testcase?key=5718435866869760 Project: flac Fuzzing Engine: libFuzzer Fuzz Target: fuzzerencoder Job Type: libfuzzerasani386flac Platform Id: linux Crash Type: UNKNOWN WRITE Crash Address: 0x7a6fb7f0 Crash State:...
EulerOS Virtualization for ARM 64 3.0.3.0 : flac (EulerOS-SA-2019-2327)
According to the version of the flac package installed, the EulerOS Virtualization for ARM 64 installation on the remote host is affected by the following vulnerability : - An error in the 'readmetadatavorbiscomment' function src/libFLAC/streamdecoder.c in FLAC version 1.3.2 can be exploited to...
flac:fuzzer_encoder: Crash in FLAC__bitwriter_write_raw_uint32_nocheck
Project: https://github.com/xiph/flac.git Detailed Report: https://oss-fuzz.com/testcase?key=5697199728230400 Project: flac Fuzzing Engine: libFuzzer Fuzz Target: fuzzerencoder Job Type: libfuzzerasani386flac Platform Id: linux Crash Type: UNKNOWN WRITE Crash Address: 0xb61fb820 Crash State:...
flac:fuzzer_encoder: Crash in FLAC__bitwriter_free
Detailed Report: https://oss-fuzz.com/testcase?key=5648926757093376 Project: flac Fuzzing Engine: libFuzzer Fuzz Target: fuzzerencoder Job Type: libfuzzerasani386flac Platform Id: linux Crash Type: UNKNOWN WRITE Crash Address: 0x553c57f0 Crash State: FLACbitwriterfree FLACstreamencoderfinish...
flac:fuzzer_decoder: Heap-buffer-overflow in FLAC__bitreader_read_rice_signed_block
Project: https://github.com/xiph/flac.git Detailed Report: https://oss-fuzz.com/testcase?key=5670265022840832 Project: flac Fuzzing Engine: libFuzzer Fuzz Target: fuzzerdecoder Job Type: libfuzzerasanflac Platform Id: linux Crash Type: Heap-buffer-overflow READ 4 Crash Address: 0x625000002100 Cra...
FLAC -- out-of-bounds read
Oss-Fuzz reports: There is a possible out of bounds read due to a heap buffer overflow in FLACbitreaderreadricesignedblock of bitreader.c...
flac:fuzzer_decoder: Use-of-uninitialized-value in FLAC::Decoder::FuzzerStream::write_callback
Project: https://github.com/xiph/flac.git Detailed Report: https://oss-fuzz.com/testcase?key=5735564778668032 Project: flac Fuzzing Engine: libFuzzer Fuzz Target: fuzzerdecoder Job Type: libfuzzermsanflac Platform Id: linux Crash Type: Use-of-uninitialized-value Crash Address: Crash State:...