750 matches found
SUSE CVE-2017-11549
The playmidi function in playmidi.c in TiMidity++ 2.14.0 allows remote attackers to cause a denial of service large loop and CPU consumption via a crafted mid file. NOTE: CPU consumption might be relevant when using the --background option...
SUSE CVE-2017-11664
The WMSetupMidiEvent function in internalmidi.c:2122 in WildMIDI 0.4.2 can cause a denial of service invalid memory read and application crash via a crafted mid file...
SUSE CVE-2017-11661
The WMSetupMidiEvent function in internalmidi.c:2318 in WildMIDI 0.4.2 can cause a denial of service invalid memory read and application crash via a crafted mid file...
SUSE CVE-2018-10902
It was found that the raw midi kernel driver does not protect against concurrent access which leads to a double realloc double free in sndrawmidiinputparams and sndrawmidioutputstatus which are part of sndrawmidiioctl handler in rawmidi.c file. A malicious local attacker could possibly use this f...
SUSE CVE-2018-20961
In the Linux kernel before 4.16.4, a double free vulnerability in the fmidisetalt function of drivers/usb/gadget/function/fmidi.c in the fmidi driver may allow attackers to cause a denial of service or possibly have unspecified other impact...
GSD-2023-1001538 ALSA: line6: fix stack overflow in line6_midi_transmit
ALSA: line6: fix stack overflow in line6miditransmit This is an automated ID intended to aid in discovery of potential security vulnerabilities. The actual impact and attack plausibility have not yet been proven. This ID is fixed in Linux Kernel version v4.9.337 by commit...
GSD-2023-1000914 ALSA: line6: fix stack overflow in line6_midi_transmit
ALSA: line6: fix stack overflow in line6miditransmit This is an automated ID intended to aid in discovery of potential security vulnerabilities. The actual impact and attack plausibility have not yet been proven. This ID is fixed in Linux Kernel version v5.15.87 by commit...
PT-2023-33535 · Linux · Linux Kernel
Name of the Vulnerable Software and Affected Versions: Linux Kernel versions prior to v6.0.17 Description: A stack overflow issue was discovered in the line6 midi transmit function. The actual impact and attack plausibility have not yet been proven. Recommendations: For Linux Kernel versions prio...
Kakao PotPlayer 安全漏洞
Kakao PotPlayer is a lightweight media player from Korea's Kakao Corporation that supports multiple formats. A security vulnerability exists in Kakao PotPlayer that stems from a problem in an unknown portion of the component MID File Handler, which could lead to a denial of service...
CVE-2021-33897
A buffer overflow in Synthesia before 10.7.5567, when a non-Latin locale is used, allows user-assisted attackers to cause a denial of service application crash via a crafted MIDI file with malformed bytes. This file is mishandled during a deletion attempt. In Synthesia before 10.9, an improper pa...
CVE-2021-33897
A buffer overflow in Synthesia before 10.7.5567, when a non-Latin locale is used, allows user-assisted attackers to cause a denial of service application crash via a crafted MIDI file with malformed bytes. This file is mishandled during a deletion attempt. In Synthesia before 10.9, an improper pa...
Buffer overflow
A buffer overflow in Synthesia before 10.7.5567, when a non-Latin locale is used, allows user-assisted attackers to cause a denial of service application crash via a crafted MIDI file with malformed bytes. This file is mishandled during a deletion attempt. In Synthesia before 10.9, an improper pa...
CVE-2021-33897
A buffer overflow in Synthesia before 10.7.5567, when a non-Latin locale is used, allows user-assisted attackers to cause a denial of service application crash via a crafted MIDI file with malformed bytes. This file is mishandled during a deletion attempt. In Synthesia before 10.9, an improper pa...
CVE-2021-33897
CVE-2021-33897 affects Synthesia. A buffer overflow in Synthesia before 10.7.5567 (when a non-Latin locale is used) can be triggered by a crafted MIDI file with malformed bytes, leading to a denial of service (application crash) during deletion. A separate issue in Synthesia before 10.9 involves ...
CVE-2021-33897
A buffer overflow in Synthesia before 10.7.5567, when a non-Latin locale is used, allows user-assisted attackers to cause a denial of service application crash via a crafted MIDI file with malformed bytes. This file is mishandled during a deletion attempt. In Synthesia before 10.9, an improper pa...
kernel: ALSA: usb-audio: Cancel pending work at closing a MIDI substream
In the Linux kernel, the following vulnerability has been resolved: ALSA: usb-audio: Cancel pending work at closing a MIDI substream At closing a USB MIDI output substream, there might be still a pending work, which would eventually access the rawmidi runtime object that is being released. For...
CVE-2022-20290
In Midi, there is a possible way to learn about private midi devices due to a permissions bypass. This could lead to local escalation of privilege with no additional execution privileges needed. User interaction is not needed for exploitation.Product: AndroidVersions: Android-13Android ID:...
CVE-2022-20290
In Midi, there is a possible way to learn about private midi devices due to a permissions bypass. This could lead to local escalation of privilege with no additional execution privileges needed. User interaction is not needed for exploitation.Product: AndroidVersions: Android-13Android ID:...
CVE-2022-20290
In Midi, there is a possible way to learn about private midi devices due to a permissions bypass. This could lead to local escalation of privilege with no additional execution privileges needed. User interaction is not needed for exploitation.Product: AndroidVersions: Android-13Android ID:...
Privilege escalation
In Midi, there is a possible way to learn about private midi devices due to a permissions bypass. This could lead to local escalation of privilege with no additional execution privileges needed. User interaction is not needed for exploitation.Product: AndroidVersions: Android-13Android ID:...