The vulnerability of the WavpackPackInit function in the packUtils.c component of the WavPack audio codec, which is related to infinite loop execution, allows attackers to cause a service failure.

The vulnerability of the WavpackPackInit function in the packUtils.c component of the WavPack audio codec is related to the infinite execution of a loop. Exploiting this vulnerability allows an attacker to trigger a service failure using a specially created WAV audio file...

Advisory ROSA-SA-2021-1994

Software: vorbis-tools 1.4.0 OS: Cobalt 7.9 CVE-ID: CVE-2014-9638 CVE-Crit: MEDIUM CVE-DESC: oggenc in vorbis-tools 1.4.0 allows remote attackers to cause a denial of service division-by-zero error and crash via a WAV file with the number of channels set to zero. CVE-STATUS: default CVE-REV:...

Information Disclosure

bass is vulnerable to information disclosure. An out-of-bounds read vulnerability occurs when an attacker submits a malicious wav file...

CVE-2021-33844

A floating point exception divide-by-zero issue was discovered in SoX in functon startread of wav.c file. An attacker with a crafted wav file, could cause an application to crash...

WordPress Core External Entity Injection (CVE-2021-29447)

An XXE vulnerability exists in WordPress Core. The vulnerability is due to insufficient validation of XML data when parsing RIFF WAV file metadata...

Daniel Kamil Kozar tsMuxer Buffer Overflow Vulnerability

Daniel Kamil Kozar tsMuxer is an open source application by Daniel Kamil Kozar. Transport stream mixer for remixing/mixing elementary streams. Daniel Kamil Kozar tsMuxer 2.6.16 suffers from a buffer overflow vulnerability that can be exploited by an attacker to cause a denial of service DoS by...

CVE-2021-26805

Buffer Overflow in tsMuxer 2.6.16 allows attackers to cause a Denial of Service DoS by running the application with a malicious WAV file...

CVE-2021-26805

Buffer Overflow in tsMuxer 2.6.16 allows attackers to cause a Denial of Service DoS by running the application with a malicious WAV file...

Buffer overflow

Buffer Overflow in tsMuxer 2.6.16 allows attackers to cause a Denial of Service DoS by running the application with a malicious WAV file...

CVE-2021-26805

Buffer Overflow in tsMuxer 2.6.16 allows attackers to cause a Denial of Service DoS by running the application with a malicious WAV file...

CVE-2021-26805

CVE-2021-26805 concerns a buffer overflow in tsMuxer 2.6.16 when processing a malicious WAV file, enabling a DoS. Affected component: tsMuxer (2.6.16). Root cause: buffer overflow in WAV handling. Impact: denial of service; availability partially affected. Exploitation details are not provided in...

Daniel Kamil Kozar tsMuxer 安全漏洞

Daniel Kamil Kozar tsMuxer is an open source application by Daniel Kamil Kozar. Transport stream mixer for remixing/mixing elementary streams. Daniel Kamil Kozar tsMuxer 2.6.16 suffers from a buffer overflow vulnerability that can be exploited by an attacker to cause a denial of service DoS by...

Buffer Overflows

Sound eXchange is vulnerable to buffer overflows. Remote attackers could cause overflows using a crafted WAV file via AdpcmReadBlock function...

Denial Of Service (DoS)

sox is vulnerable to denial of service DoS. The vulnerability exists in the startread function in wav.c, allowing a malicious user to crash the application via a crafted wav file...

Denial Of Service (DoS)

wavwritehdr is vulnerable to denial of service. An attacker may cause a denial of service via a crafted snd file, during conversion to a wav file...

Apple macOS AudioToolboxCore Wave Header Parsing Sign Extension Remote Code Execution Vulnerability

This vulnerability allows remote attackers to execute arbitrary code on affected installations of Apple macOS. Interaction with the AudioToolbox library is required to exploit this vulnerability but attack vectors may vary depending on the implementation. The specific flaw exists within the...

openSUSE Security Update : java-1_8_0-openjdk (openSUSE-2020-2083)

This update for java-180-openjdk fixes the following issues : - Fix regression '8250861: Crash in MinINode::IdealPhaseGVN, bool', introduced in October 2020 CPU. - Update to version jdk8u272 icedtea 3.17.0 July 2020 CPU, bsc1174157, and October 2020 CPU, bsc1177943 - New features + JDK-8245468: A...

CVE-2019-18795

The BASS Audio Library 2.4.14 under Windows is prone to a BASSStreamCreateFile out of bounds read vulnerability via a crafted .wav file. An attacker can exploit this issues to gain access to sensitive information that may aid in further attacks. A failure in exploitation leads to denial of servic...

Out-of-bounds

The BASS Audio Library 2.4.14 under Windows is prone to a BASSStreamCreateFile out of bounds read vulnerability via a crafted .wav file. An attacker can exploit this issues to gain access to sensitive information that may aid in further attacks. A failure in exploitation leads to denial of servic...

CVE-2019-18795

The CVE-2019-18795 issue affects the BASS Audio Library 2.4.14 on Windows. It describes an out-of-bounds read in BASS_StreamCreateFile triggered by a crafted WAV file, enabling an attacker to read sensitive information and potentially aid further attacks; exploitation may also cause denial of ser...