CVE-2017-9260

The TDStretchSSE::calcCrossCorr function in source/SoundTouch/sseoptimized.cpp in SoundTouch 1.9.2 allows remote attackers to cause a denial of service heap-based buffer over-read and application crash via a crafted wav file...

CVE-2017-9412

The unpackreadsamples function in frontend/getaudio.c in LAME 3.99.5 allows remote attackers to cause a denial of service invalid memory read and application crash via a crafted wav file...

CVE-2017-9260

The TDStretchSSE::calcCrossCorr function in source/SoundTouch/sseoptimized.cpp in SoundTouch 1.9.2 allows remote attackers to cause a denial of service heap-based buffer over-read and application crash via a crafted wav file...

CVE-2017-9259

The TDStretch::acceptNewOverlapLength function in source/SoundTouch/TDStretch.cpp in SoundTouch 1.9.2 allows remote attackers to cause a denial of service memory allocation error and application crash via a crafted wav file...

DEBIAN-CVE-2017-9258

The TDStretch::processSamples function in source/SoundTouch/TDStretch.cpp in SoundTouch 1.9.2 allows remote attackers to cause a denial of service infinite loop and CPU consumption via a crafted wav file...

DEBIAN-CVE-2017-9260

The TDStretchSSE::calcCrossCorr function in source/SoundTouch/sseoptimized.cpp in SoundTouch 1.9.2 allows remote attackers to cause a denial of service heap-based buffer over-read and application crash via a crafted wav file...

CVE-2017-9259

The TDStretch::acceptNewOverlapLength function in source/SoundTouch/TDStretch.cpp in SoundTouch 1.9.2 allows remote attackers to cause a denial of service memory allocation error and application crash via a crafted wav file...

CVE-2017-9412

The unpackreadsamples function in frontend/getaudio.c in LAME 3.99.5 allows remote attackers to cause a denial of service invalid memory read and application crash via a crafted wav file...

CVE-2017-9412

The unpackreadsamples function in frontend/getaudio.c in LAME 3.99.5 allows remote attackers to cause a denial of service invalid memory read and application crash via a crafted wav file...

CVE-2017-9258

The CVE-2017-9258 family affects the SoundTouch library (notably TDStretch.cpp, SoundTouch 1.9.2). The issue allows remote attackers to trigger a denial of service (infinite loop and high CPU) via a crafted WAV file (CVE-2017-9258); related CVEs (CVE-2017-9259, CVE-2017-9260) describe memory allo...

CVE-2017-9260

The TDStretchSSE::calcCrossCorr function in source/SoundTouch/sseoptimized.cpp in SoundTouch 1.9.2 allows remote attackers to cause a denial of service heap-based buffer over-read and application crash via a crafted wav file...

CVE-2017-9258

The TDStretch::processSamples function in source/SoundTouch/TDStretch.cpp in SoundTouch 1.9.2 allows remote attackers to cause a denial of service infinite loop and CPU consumption via a crafted wav file...

CVE-2017-9412

The unpackreadsamples function in frontend/getaudio.c in LAME 3.99.5 allows remote attackers to cause a denial of service invalid memory read and application crash via a crafted wav file...

CVE-2017-9258

The TDStretch::processSamples function in source/SoundTouch/TDStretch.cpp in SoundTouch 1.9.2 allows remote attackers to cause a denial of service infinite loop and CPU consumption via a crafted wav file...

CVE-2017-9259

The TDStretch::acceptNewOverlapLength function in source/SoundTouch/TDStretch.cpp in SoundTouch 1.9.2 allows remote attackers to cause a denial of service memory allocation error and application crash via a crafted wav file...

CVE-2017-9412

CVE-2017-9412 affects LAME 3.99.5, where unpack_read_samples in frontend/get_audio.c can be triggered by a crafted WAV file to cause a denial of service via an invalid memory read and application crash. Public advisories indicate fixes in newer LAME releases (e.g., LAME 3.100), and several packag...

CVE-2017-9259

CVE-2017-9259 is a concrete vulnerability in SoundTouch 1.9.2 (TDStretch.cpp, TDStretch::acceptNewOverlapLength) that can cause a denial-of-service via a crafted WAV file (memory allocation error and crash). Related CVEs (e.g., CVE-2017-9258, CVE-2017-9260, CVE-2018-1000223, CVE-2018-14044, CVE-2...

CVE-2017-9259

The TDStretch::acceptNewOverlapLength function in source/SoundTouch/TDStretch.cpp in SoundTouch 1.9.2 allows remote attackers to cause a denial of service memory allocation error and application crash via a crafted wav file...

CVE-2017-9412

The unpackreadsamples function in frontend/getaudio.c in LAME 3.99.5 allows remote attackers to cause a denial of service invalid memory read and application crash via a crafted wav file...

SWFTools Denial of Service Vulnerability (CNVD-2017-15103)

SWFTools is a utility toolset for working with Adobe Flash files SWF files. A denial of service vulnerability exists in the 'wavconvert2mono' function in the lib/wav.c file in SWFTools version 0.9.2. An attacker can exploit this vulnerability to cause a denial of service crash...