MAL-2025-26793 Malicious code in mp3-do-wnload-file-to-day-204935-superstar-b7g5b-dxywxb (npm)

The package mp3-do-wnload-file-to-day-204935-superstar-b7g5b-dxywxb was found to contain malicious code...

MAL-2025-15131 Malicious code in ava-ilable-down-load-mp3-today-257706-but-id-rather-be-with-you-why9d-hoeovu (npm)

The package ava-ilable-down-load-mp3-today-257706-but-id-rather-be-with-you-why9d-hoeovu was found to contain malicious code...

MAL-2025-14245 Malicious code in alb-um-availa-ble-zip-mp3-file-2013-9765-night-time-my-time-8wmqr-nytqyh (npm)

The package alb-um-availa-ble-zip-mp3-file-2013-9765-night-time-my-time-8wmqr-nytqyh was found to contain malicious code...

MAL-2025-20539 Malicious code in file-alb-um-zip-new-mp3-5298-reality-1-rymoz-ptimcb (npm)

The package file-alb-um-zip-new-mp3-5298-reality-1-rymoz-ptimcb was found to contain malicious code...

MAL-2025-26788 Malicious code in mp3-do-wnload-file-to-day-116611-strong-arm-of-the-law-vu3r7-gbcocp (npm)

The package mp3-do-wnload-file-to-day-116611-strong-arm-of-the-law-vu3r7-gbcocp was found to contain malicious code...

MAL-2025-18693 Malicious code in down-lo-ad-now-zip-mp3-122443-vibrations-1-nvkcw-inalaf (npm)

The package down-lo-ad-now-zip-mp3-122443-vibrations-1-nvkcw-inalaf was found to contain malicious code...

MAL-2025-18700 Malicious code in down-lo-ad-now-zip-mp3-68330-there-it-is-ctlad-hdnfhn (npm)

The package down-lo-ad-now-zip-mp3-68330-there-it-is-ctlad-hdnfhn was found to contain malicious code...

Malicious code in zip-mp3-a-lbum-do-wnload-new-75748-toy-love-ohdfl-whbyww (npm)

The package zip-mp3-a-lbum-do-wnload-new-75748-toy-love-ohdfl-whbyww was found to contain malicious code...

MAL-2025-20541 Malicious code in file-alb-um-zip-new-mp3-5722-vanishing-point-iu8kn-ggwnhe (npm)

The package file-alb-um-zip-new-mp3-5722-vanishing-point-iu8kn-ggwnhe was found to contain malicious code...

Samsung S24 MP3 Decoder Out-Of-Bounds Read

There is an out-of-bounds read in the MP3 decoder in the Samsung S24. The function smp123djointstereov1 indexes into several tables for decoding, and does not check that the index is valid, allowing the tables to be read out of bounds. It may be possible to use this bug to bypass ASLR, as loading...

CVE-2024-30530

Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in Sonaar Music MP3 Audio Player for Music, Radio & Podcast by Sonaar allows Stored XSS.This issue affects MP3 Audio Player for Music, Radio & Podcast by Sonaar: from n/a through 5.1...

CVE-2024-20007

In mp3 decoder, there is a possible out of bounds write due to a race condition. This could lead to remote escalation of privilege with no additional execution privileges needed. User interaction is needed for exploitation. Patch ID: ALPS08441369; Issue ID: ALPS08441369...

CVE-2024-6083

A vulnerability, which was classified as critical, was found in PHPVibe 11.0.46. Affected is an unknown function of the file /app/uploading/upload-mp3.php of the component Media Upload Page. The manipulation of the argument file leads to unrestricted upload. It is possible to launch the attack...

CVE-2024-13157

The MP3 Audio Player – Music Player, Podcast Player & Radio by Sonaar plugin for WordPress is vulnerable to Stored Cross-Site Scripting via Podcast RSS Feed in all versions up to, and including, 5.9.3 due to insufficient input sanitization and output escaping on user supplied attributes. This mak...

CVE-2024-56266

Missing Authorization vulnerability in sonaar MP3 Audio Player for Music, Radio & Podcast by Sonaar mp3-music-player-by-sonaar allows Accessing Functionality Not Properly Constrained by ACLs.This issue affects MP3 Audio Player for Music, Radio & Podcast by Sonaar: from n/a through = 5.8...

CVE-2024-10268

The MP3 Audio Player – Music Player, Podcast Player & Radio by Sonaar plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the plugin's sonaaraudioplayer shortcode in all versions up to, and including, 5.8 due to insufficient input sanitization and output escaping on user supplie...

CVE-2023-52202

Deserialization of Untrusted Data vulnerability in SVNLabs Softwares HTML5 MP3 Player with Folder Feedburner Playlist Free.This issue affects HTML5 MP3 Player with Folder Feedburner Playlist Free: from n/a through 2.8.0...

CVE-2023-52207

Deserialization of Untrusted Data vulnerability in SVNLabs Softwares HTML5 MP3 Player with Playlist Free.This issue affects HTML5 MP3 Player with Playlist Free: from n/a through 3.0.0...

CVE-2023-37734

EZ softmagic MP3 Audio Converter 2.7.3.700 was discovered to contain a buffer overflow...

CVE-2023-28885

The MyLink infotainment system build 2021.3.26 in General Motors Chevrolet Equinox 2021 vehicles allows attackers to cause a denial of service temporary failure of Media Player functionality via a crafted MP3 file...