1503 matches found
OESA-2024-2326 vorbis-tools security update
Ogg Vorbis is a fully open, non-proprietary, patent-and-royalty-free, general-purpose compressed audio format for mid to high quality 8kHz-48.0kHz, 16+ bit, polyphonic audio and music at fixed and variable bitrates from 16 to 128 kbps/channel. This places Vorbis in the same competitive class as...
The vulnerability of the startread() function in the wav.c component of the SoX sound processing program allows a hacker to cause a service failure.
The vulnerability of the startread function in the SoX sound processing component wav.c is related to the lack of checks for division by zero. Exploiting this vulnerability allows a attacker to cause a service failure using a specially created file...
An off-by-one error in function wav_read_header in src/wav.c in Libsndfile 1.1.0 results in a write out of bound which allows an attacker to execute arbitrary code Denial of Service or other unspecified impacts.
...
RHEL 6 : speex (Unpatched Vulnerability)
The remote Redhat Enterprise Linux 6 host has one or more packages installed that are affected by multiple vulnerabilities that have been acknowledged by the vendor but will not be patched. - speex: stack-based buffer overflow in speexenc.c via a crafted WAV file CVE-2020-23904 - A Divide by Zero...
RHEL 7 : speex (Unpatched Vulnerability)
The remote Redhat Enterprise Linux 7 host has one or more packages installed that are affected by multiple vulnerabilities that have been acknowledged by the vendor but will not be patched. - speex: stack-based buffer overflow in speexenc.c via a crafted WAV file CVE-2020-23904 - A Divide by Zero...
CVE-2024-33429
Buffer-Overflow vulnerability at pcmconvert.h:513 of phiola v2.0-rc22 allows a remote attacker to execute arbitrary code via a crafted .wav file...
CVE-2024-33428
Buffer-Overflow vulnerability at conv.c:68 of stsaz phiola v2.0-rc22 allows a remote attacker to execute arbitrary code via the a crafted .wav file...
CVE-2024-33430
An issue in phiola/src/afilter/pcmconvert.h:513 of phiola v2.0-rc22 allows a remote attacker to execute arbitrary code via the a crafted .wav file...
CVE-2024-33429
Buffer-Overflow vulnerability at pcmconvert.h:513 of phiola v2.0-rc22 allows a remote attacker to execute arbitrary code via a crafted .wav file...
CVE-2024-33428
Buffer-Overflow vulnerability at conv.c:68 of stsaz phiola v2.0-rc22 allows a remote attacker to execute arbitrary code via the a crafted .wav file...
CVE-2024-33431
An issue in phiola/src/afilter/conv.c:115 of phiola v2.0-rc22 allows a remote attacker to cause a denial of service via a crafted .wav file...
CVE-2024-33430
An issue in phiola/src/afilter/pcmconvert.h:513 of phiola v2.0-rc22 allows a remote attacker to execute arbitrary code via the a crafted .wav file...
CVE-2024-33428
Buffer-Overflow vulnerability at conv.c:68 of stsaz phiola v2.0-rc22 allows a remote attacker to execute arbitrary code via the a crafted .wav file...
CVE-2024-33430
An issue in phiola/src/afilter/pcmconvert.h:513 of phiola v2.0-rc22 allows a remote attacker to execute arbitrary code via the a crafted .wav file...
CVE-2024-33431
An issue in phiola/src/afilter/conv.c:115 of phiola v2.0-rc22 allows a remote attacker to cause a denial of service via a crafted .wav file...
CVE-2024-33429
Buffer-Overflow vulnerability at pcmconvert.h:513 of phiola v2.0-rc22 allows a remote attacker to execute arbitrary code via a crafted .wav file...
CVE-2024-33429
The audio player and converter phiola (version v2.0-rc22 ) is susceptible to a heap-based buffer overflow vulnerability located at pcm_convert.h:513 . A remote attacker can leverage this flaw to execute arbitrary code by providing a crafted .wav file . To mitigate this risk, it is recommended to ...
CVE-2024-33428
A heap-based buffer overflow vulnerability exists in stsaz phiola version 2.0-rc22 at conv.c:68. This flaw allows a remote attacker to execute arbitrary code by providing a crafted .wav file . As no patched version is currently available, it is recommended to disable functionality handling .wav f...
CVE-2024-33430
The audio player phiola version v2.0-rc22 is vulnerable to remote code execution (RCE) due to an issue in phiola/src/afilter/pcm_convert.h:513. A remote attacker can exploit this by providing a crafted .wav file . The provided documents do not specify a remediation or a newer version containing a...