CVE-2026-51254

schreibfaul1 ESP32-audioI2S v3.4.5 has an integer underflow vulnerability in the MP3Decoder::GetBits function of the MP3 decoder due to unchecked bit reading operations. The lack of validation on the nBits parameter causes the cachedBits counter to underflow to negative values, leading to invalid...

CVE-2026-51254

schreibfaul1 ESP32-audioI2S v3.4.5 has an integer underflow vulnerability in the MP3Decoder::GetBits function of the MP3 decoder due to unchecked bit reading operations. The lack of validation on the nBits parameter causes the cachedBits counter to underflow to negative values, leading to invalid...

CVE-2026-51254

Concrete details found: ESP32-audioI2S v3.4.5 MP3 decoder MP3Decoder::GetBits() has an unchecked nBits read, causing an integer underflow of cachedBits. This can lead to invalid bitstream parsing, app crash, or arbitrary code execution via a crafted MP3 file.

EUVD-2026-49859

schreibfaul1 ESP32-audioI2S v3.4.5 has an integer underflow vulnerability in the MP3Decoder::GetBits function of the MP3 decoder due to unchecked bit reading operations. The lack of validation on the nBits parameter causes the cachedBits counter to underflow to negative values, leading to invalid...

PYSEC-2026-727 OpenEXR invalid read

In OpenEXR 2.2.0, an invalid read of size 1 in the getBits function in ImfHuf.cpp could cause the application to crash...

CVE-2022-38863

Certain The MPlayer Project products are vulnerable to Buffer Overflow via function mpgetbits of libmpdemux/mpeghdr.c which affects mencoder and mplayer. This affects mecoder SVN-r38374-13.0.1 and mplayer SVN-r38374-13.0.1...

EUVD-2018-2846

Malware in sbrugna...

Linux Distros Unpatched Vulnerability : CVE-2021-42204

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - An issue was discovered in swftools through 20201222. A heap-buffer-overflow exists in the function swfGetBits located in rfxswf.c. It allows an attacker to cau...

Linux Distros Unpatched Vulnerability : CVE-2017-1000174

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - In SWFTools, an address access exception was found in swfdump swfGetBits. CVE-2017-1000174 Note that Nessus relies on the presence of the package as reported by...

Linux Distros Unpatched Vulnerability : CVE-2021-42198

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - An issue was discovered in swftools through 20201222. A NULL pointer dereference exists in the function swfGetBits located in rfxswf.c. It allows an attacker to...

CVE-2021-0379

In getUpTo17bits of pvmp3getbits.cpp, there is a possible out of bounds read due to a heap buffer overflow. This could lead to remote information disclosure with no additional execution privileges needed. User interaction is needed for exploitation.Product: AndroidVersions: Android-11Android ID:...

SUSE CVE-2017-9112

In OpenEXR 2.2.0, an invalid read of size 1 in the getBits function in ImfHuf.cpp could cause the application to crash...

SUSE CVE-2017-12839

A heap-based buffer over-read in the getbits function in src/libmpg123/getbits.h in mpg123 through 1.25.5 allows remote attackers to cause a possible denial-of-service out-of-bounds read or possibly have unspecified other impact via a crafted mp3 file...

SUSE CVE-2017-1000174

In SWFTools, an address access exception was found in swfdump swfGetBits...

PT-2022-7417 · Unknown +5 · Libmpdemux +5

Name of the Vulnerable Software and Affected Versions: MPlayer versions SVN-r38374-13.0.1 mencoder versions SVN-r38374-13.0.1 Description: The issue is related to a Buffer Overflow via the mp getbits function of libmpdemux/mpeg hdr.c, which affects mencoder and mplayer. This can lead to a denial ...

CVE-2021-42198

An issue was discovered in swftools through 20201222. A NULL pointer dereference exists in the function swfGetBits located in rfxswf.c. It allows an attacker to cause Denial of Service...

CVE-2021-42198

An issue was discovered in swftools through 20201222. A NULL pointer dereference exists in the function swfGetBits located in rfxswf.c. It allows an attacker to cause Denial of Service...

UBUNTU-CVE-2021-42204

An issue was discovered in swftools through 20201222. A heap-buffer-overflow exists in the function swfGetBits located in rfxswf.c. It allows an attacker to cause code execution...

UBUNTU-CVE-2021-42198

An issue was discovered in swftools through 20201222. A NULL pointer dereference exists in the function swfGetBits located in rfxswf.c. It allows an attacker to cause Denial of Service...

Swftools 缓冲区错误漏洞

Swftools is a set of utilities for working with Adobe Flash files SWF files. An out-of-bounds write vulnerability exists in Swftools 2020-12-22 and prior versions, which stems from a heap buffer overflow in the function swfGetBits located in rfxswf.c. The vulnerability is caused by a heap buffer...