1508 matches found
CVE-2020-23904
CVE-2020-23904 affects Speex v1.2, with a stack-based buffer overflow in speexenc.c triggered by a crafted WAV file. The vulnerability can lead to a denial of service. The vendor notes inability to reproduce it and describes Speex as a demo program, which implies limited or unverified exploit pra...
CVE-2020-23904
Removed by vendor...
CVE-2020-23903
A Divide by Zero vulnerability in the function static int readsamples of Speex v1.2 allows attackers to cause a denial of service DoS via a crafted WAV file...
CVE-2020-23903
A Divide by Zero vulnerability in the function static int readsamples of Speex v1.2 allows attackers to cause a denial of service DoS via a crafted WAV file...
CVE-2020-23903
CVE-2020-23903 is a divide-by-zero DoS in Speex v1.2 (function read_samples) exploitable via a crafted WAV file. Connected docs confirm the vulnerability, its impact (DoS/crash), and mitigations such as patched releases (e.g., IBM Cloud Pak components at 5.0.1, AlmaLinux patch ALSA-2022-7979, Mag...
Speex 缓冲区错误漏洞
Speex is a free software proprietary audio compression format designed for speech. Speex v1.2 contains a security vulnerability that could be exploited by an attacker to cause a denial of service DoS via a crafted WAV file...
Huawei EulerOS: Security Advisory for libsndfile (EulerOS-SA-2021-2638)
The remote host is missing an update for the Huawei EulerOS SPDX-FileCopyrightText: 2021 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...
Huawei EulerOS: Security Advisory for libsndfile (EulerOS-SA-2021-2592)
The remote host is missing an update for the Huawei EulerOS SPDX-FileCopyrightText: 2021 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...
PT-2021-4866 · Adobe · Audition
Name of the Vulnerable Software and Affected Versions: Adobe Audition versions 14.4 and earlier Description: The issue is related to a memory corruption vulnerability when parsing a WAV file, potentially resulting in arbitrary code execution in the context of the current user. User interaction is...
EulerOS 2.0 SP3 : libsndfile (EulerOS-SA-2021-2592)
According to the versions of the libsndfile package installed, the EulerOS installation on the remote host is affected by the following vulnerabilities : - A heap buffer overflow vulnerability in msadpcmdecodeblock of libsndfile 1.0.30 allows attackers to execute arbitrary code via a crafted WAV...
Important: libsndfile
Issue Overview: A heap buffer overflow flaw was found in libsndfile. This flaw allows an attacker to execute arbitrary code via a crafted WAV file. The highest threat from this vulnerability is to confidentiality, integrity, as well as system availability. CVE-2021-3246 Affected Packages:...
Huawei EulerOS: Security Advisory for libsndfile (EulerOS-SA-2021-2505)
The remote host is missing an update for the Huawei EulerOS SPDX-FileCopyrightText: 2021 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...
EulerOS 2.0 SP5 : libsndfile (EulerOS-SA-2021-2505)
According to the versions of the libsndfile package installed, the EulerOS installation on the remote host is affected by the following vulnerabilities : - A heap buffer overflow vulnerability in msadpcmdecodeblock of libsndfile 1.0.30 allows attackers to execute arbitrary code via a crafted WAV...
SELA heap buffer overflow vulnerability
SELA is a lossless audio codec. a heap buffer overflow vulnerability exists in file::WavFile::writeToFile in wavfile.c in SELA 20200412 and earlier versions. No detailed vulnerability details are currently available...
CVE-2021-39552
An issue was discovered in sela through 20200412. file::WavFile::readFromFile in wavfile.c has a heap-based buffer overflow...
CVE-2021-39549
An issue was discovered in sela through 20200412. A NULL pointer dereference exists in the function file::WavFile::WavFile located in wavfile.c. It allows an attacker to cause Denial of Service...
CVE-2021-39544
An issue was discovered in sela through 20200412. file::WavFile::writeToFile in wavfile.c has a heap-based buffer overflow...
CVE-2021-39544
An issue was discovered in sela through 20200412. file::WavFile::writeToFile in wavfile.c has a heap-based buffer overflow...
