116 matches found
Medium: libsndfile
Issue Overview: An off-by-one error in function wavreadheader in src/wav.c in Libsndfile 1.1.0, results in a write out of bound, which allows an attacker to execute arbitrary code, Denial of Service or other unspecified impacts. CVE-2022-33064 Affected Packages: libsndfile Issue Correction: Run d...
bfd coff-rs6000 function Heap Buffer Overflow DoS
The vulnerability of the bfdxcoffreadarhdr function in the bfd/coff-rs6000.c component of the GNU Binutils development environment is related to reading data beyond the allowed limits of the buffer. Exploiting this vulnerability allows an attacker to gain access to confidential data, compromise i...
SUSE CVE-2022-33065
Multiple signed integers overflow in function aureadheader in src/au.c and in functions mat4open and mat4readheader in src/mat4.c in Libsndfile, allows an attacker to cause Denial of Service or other unspecified impacts...
DEBIAN-CVE-2022-33065
Multiple signed integers overflow in function aureadheader in src/au.c and in functions mat4open and mat4readheader in src/mat4.c in Libsndfile, allows an attacker to cause Denial of Service or other unspecified impacts...
UBUNTU-CVE-2022-33065
Multiple signed integers overflow in function aureadheader in src/au.c and in functions mat4open and mat4readheader in src/mat4.c in Libsndfile, allows an attacker to cause Denial of Service or other unspecified impacts...
UBUNTU-CVE-2022-33064
An off-by-one error in function wavreadheader in src/wav.c in Libsndfile 1.1.0, results in a write out of bound, which allows an attacker to execute arbitrary code, Denial of Service or other unspecified impacts...
PT-2023-13228
Name of the Vulnerable Software and Affected Versions Libsndfile version 1.1.0 Description An off-by-one error in the wav read header function in src/wav.c results in a write out of bounds, allowing an attacker to execute arbitrary code, cause a Denial of Service, or have other unspecified impact...
CLSA-2023-1677784249 Fix CVE(s): CVE-2022-48303, CVE-2021-20193
SECURITY UPDATE: memory leak in readheader - debian/patches/CVE-2021-20193.patch: Don't return directly from the loop. Instead set the status and break. Return the status. - CVE-2021-20193.patch SECURITY UPDATE: a heap buffer overflow - debian/patches/CVE-2022-48303.patch: Check for the end of...
SUSE CVE-2009-1788
Heap-based buffer overflow in vocreadheader in libsndfile 1.0.15 through 1.0.19, as used in Winamp 5.552 and possibly other media programs, allows remote attackers to cause a denial of service application crash and possibly execute arbitrary code via a VOC file with an invalid header value...
SUSE CVE-2015-8919
The lhareadfileextendedheader function in archivereadsupportformatlha.c in libarchive before 3.2.0 allows remote attackers to cause a denial of service out-of-bounds heap via a crafted 1 lzh or 2 lha file...
SUSE CVE-2017-12940
libunrar.a in UnRAR before 5.5.7 has an out-of-bounds read in the EncodeFileName::Decode call within the Archive::ReadHeader15 function...
SUSE CVE-2017-14501
An out-of-bounds read flaw exists in parsefileinfo in archivereadsupportformatiso9660.c in libarchive 3.3.2 when extracting a specially crafted iso9660 iso file, related to archivereadformatiso9660readheader...
SUSE CVE-2018-1000223
soundtouch version up to and including 2.0.0 contains a Buffer Overflow vulnerability in SoundStretch/WavFile.cpp:WavInFile::readHeaderBlock that can result in arbitrary code execution. This attack appear to be exploitable via victim must open maliocius file in soundstretch utility...
SUSE CVE-2019-14442
In mpc8readheader in libavformat/mpc8.c in Libav 12.3, an input file can result in an avioseek infinite loop and hang, with 100% CPU consumption. Attackers could leverage this vulnerability to cause a denial of service via a crafted file...
kernel: ext4: fix bug_on in __es_tree_search
In the Linux kernel, the following vulnerability has been resolved: ext4: fix bugon in estreesearch Hulk Robot reported a BUGON: ================================================================== kernel BUG at fs/ext4/extentsstatus.c:199! ... RIP: 0010:ext4esend fs/ext4/extentsstatus.c:199 inline...
PT-2022-22553 · Swftools · Swftools
Name of the Vulnerable Software and Affected Versions: SWFTools affected versions not specified Description: A heap-buffer overflow issue was discovered in SWFTools via the png read header function at /src/png2swf.c. Recommendations: At the moment, there is no information about a newer version th...
LibGD read_header_tga Buffer Overflow DoS
The vulnerability of the readheadertga function in the gdtga.c component of the LibGD graphics library is related to reading data beyond the permissible buffer size. Exploiting this vulnerability allows a malicious actor to cause service failure by using a specially created TGA file...
PT-2022-2210
Name of the Vulnerable Software and Affected Versions libsndfile affected versions not specified Description The issue is related to the svx read header function in the libsndfile library, which is used for reading and writing audio files. It involves an infinite loop with no exit condition...
PT-2022-2191
Name of the Vulnerable Software and Affected Versions libsndfile affected versions not specified Description The issue is related to the caf read header function in the libsndfile library, which is used for reading and writing audio files. It is associated with memory deallocation errors...
