CVE-2026-31884: Divide By Zero

FreeRDP is a free implementation of the Remote Desktop Protocol. Prior to 3.24.0, division by zero in MS-ADPCM and IMA-ADPCM decoders when nBlockAlign is 0, leading to a crash. In libfreerdp/codec/dsp.c, both ADPCM decoders use size % blocksize where blocksize = context-common.format.nBlockAlign...

CVE-2026-31885: Out-of-bounds Read

FreeRDP is a free implementation of the Remote Desktop Protocol. Prior to 3.24.0, there is an out-of-bounds read in MS-ADPCM and IMA-ADPCM decoders due to unchecked predictor and stepindex values from input data. This vulnerability is fixed in 3.24.0...

FreeRDP has a numerical error vulnerability

FreeRDP is an open-source RDP protocol implementation developed by the FreeRDP team. Versions of FreeRDP prior to 3.24.0 contained a numerical error vulnerability. This vulnerability stemmed from a sizet underflow issue present in the IMA-ADPCM and MS-ADPCM audio decoders, which could lead to a...

CVE-2026-31883: Integer Underflow (Wrap or Wraparound)

FreeRDP is a free implementation of the Remote Desktop Protocol. Prior to 3.24.0, a sizet underflow in the IMA-ADPCM and MS-ADPCM audio decoders leads to heap-buffer-overflow write via the RDPSND audio channel. In libfreerdp/codec/dsp.c, the IMA-ADPCM and MS-ADPCM decoders subtract block header...

EUVD-2019-17113

Malware in sbrugna...

Fedora 41 : dr_libs (2024-72a8e64069)

The remote Fedora 41 host has a package installed that is affected by a vulnerability as referenced in the FEDORA-2024-72a8e64069 advisory. Update to 0^20241216git660795b - drflac 0.12.43: Fix a possible buffer overflow during decoding. Improve detection of ARM64EC. - drmp3 0.6.40: Improve...

SUSE CVE-2019-7576

SDL Simple DirectMedia Layer through 1.2.15 and 2.x through 2.0.9 has a heap-based buffer over-read in InitMSADPCM in audio/SDLwave.c outside the wNumCoef loop...

libsndfile:sndfile_fuzzer: Heap-buffer-overflow in msadpcm_decode_block

Project: https://github.com/libsndfile/libsndfile.git Detailed Report: https://oss-fuzz.com/testcase?key=5696502087024640 Project: libsndfile Fuzzing Engine: afl Fuzz Target: sndfilefuzzer Job Type: aflasanlibsndfile Platform Id: linux Crash Type: Heap-buffer-overflow WRITE 2 Crash Address:...

PT-2019-20233

Updated sdl2 packages fix security vulnerabilities This release fixes various buffer overflows when parsing or processing damaged Waveform audio and BMP image files. - Fix CVE-2019-7572 a buffer overread in IMA ADPCM nibble rhbz1676754 - Fix CVE-2019-7572 a buffer overwrite in IMA ADPCM nibble...

Fedora 28 : SDL (2019-918aad6bd5)

This release fixes a buffer overflow when processing RIFF/WAV files with in invalid MS ADPCM predictor. Note that Tenable Network Security has extracted the preceding description block directly from the Fedora update system website. Tenable has attempted to automatically clean and format it as mu...

Fedora 29 : SDL (2019-bf531902c8)

This release fixes a buffer overflow when processing RIFF/WAV files with in invalid MS ADPCM predictor. Note that Tenable Network Security has extracted the preceding description block directly from the Fedora update system website. Tenable has attempted to automatically clean and format it as mu...

PT-2019-5613

Name of the Vulnerable Software and Affected Versions SDL versions 1.2.15 and earlier SDL versions 2.x through 2.0.9 Description The issue is related to a heap-based buffer overflow in the MS ADPCM decode function of the Simple DirectMedia Layer library, located in audio/SDL wave.c. This can be...

PT-2018-15479

Name of the Vulnerable Software and Affected Versions ok-file-formats versions prior to 2018-10-16 Description The issue is related to a heap-based buffer overflow in the ok wav decode ms adpcm data function in ok wav.c. Recommendations For versions prior to 2018-10-16, update to a version releas...

PT-2017-14030

Name of the Vulnerable Software and Affected Versions Sound eXchange SoX version 14.4.2 Description A stack-based buffer overflow issue exists in the lsx ms adpcm block expand i function of adpcm.c. This can be triggered by a crafted input, leading to a denial of service attack during the...

Heap overflow

Heap-based buffer overflow in Apple QuickTime before 7.6.2 allows remote attackers to execute arbitrary code or cause a denial of service application crash via crafted MS ADPCM encoded audio data in an AVI movie file...

CVE-2009-0185: Improper Restriction of Operations within the Bounds of a Memory Buffer

Heap-based buffer overflow in Apple QuickTime before 7.6.2 allows remote attackers to execute arbitrary code or cause a denial of service application crash via crafted MS ADPCM encoded audio data in an AVI movie file...

QuickTime < 7.6.2 Multiple Vulnerabilities (Windows)

The version of QuickTime installed on the remote Windows host is older than 7.6.2. Such versions contain several vulnerabilities : - An integer underflow in QuickTime's handling of PICT images may result in a heap-based buffer overflow and, in turn, to an application crash or arbitrary code...