DEBIAN-CVE-2018-19758

There is a heap-based buffer over-read at wav.c in wavwriteheader in libsndfile 1.0.28 that will cause a denial of service...

libsndfile buffer out-of-bounds read vulnerability (CNVD-2019-00814)

libsndfile is a C library developed by software developer Erik de Castro Lopo that reads and writes audio files in AIFF, AU, and WAV formats through standard interfaces. A heap buffer out-of-bounds read vulnerability exists in the wav.c file in libsndfile version 1.0.28, which can be exploited to...

UBUNTU-CVE-2018-19758

There is a heap-based buffer over-read at wav.c in wavwriteheader in libsndfile 1.0.28 that will cause a denial of service...

SoundTouch Denial of Service Vulnerability (CNVD-2019-17469)

SoundTouch is an open source audio processing library for changing the Tempo, Pitch and Playback Rates of an audio stream or audio file. A denial of service vulnerability exists in the WavFileBase class in WavFile.cpp in SoundTouch 2.0, which can be exploited by remote attackers to cause a denial...

CVE-2018-16797

A heap-based buffer overflow in PotPlayerMini.exe in PotPlayer 1.7.8556 allows remote attackers to execute arbitrary code via a .wav file with large BytesPerSec and SamplesPerSec values, and a small DataChunkSize value...

Heap overflow

A heap-based buffer overflow in PotPlayerMini.exe in PotPlayer 1.7.8556 allows remote attackers to execute arbitrary code via a .wav file with large BytesPerSec and SamplesPerSec values, and a small DataChunkSize value...

CVE-2018-16797

A heap-based buffer overflow in PotPlayerMini.exe in PotPlayer 1.7.8556 allows remote attackers to execute arbitrary code via a .wav file with large BytesPerSec and SamplesPerSec values, and a small DataChunkSize value...

CVE-2018-16797

A heap-based buffer overflow in PotPlayerMini.exe in PotPlayer 1.7.8556 allows remote attackers to execute arbitrary code via a .wav file with large BytesPerSec and SamplesPerSec values, and a small DataChunkSize value...

CVE-2018-16797: Out-of-bounds Write

A heap-based buffer overflow in PotPlayerMini.exe in PotPlayer 1.7.8556 allows remote attackers to execute arbitrary code via a .wav file with large BytesPerSec and SamplesPerSec values, and a small DataChunkSize value...

[SECURITY] Fedora 27 Update: soundtouch-2.0.0-6.fc27

SoundTouch is a LGPL-licensed open-source audio processing library for changing the Tempo, Pitch and Playback Rates of audio streams or files. The SoundTouch library is suited for application developers writing sound processing tools that require tempo/pitch control functionality, or just for...

MGASA-2018-0331 Updated soundtouch packages fix security vulnerabilities

Updated soundtouch package fixes security vulnerabilities: The TDStretch::processSamples function in source/SoundTouch/TDStretch.cpp in SoundTouch 1.9.2 allows remote attackers to cause a denial of service infinite loop and CPU consumption via a crafted wav file CVE-2017-9258. The...

Sidify Music Converter 1.2.9 DLL Hijacking

===================================================== Exploit Title : Sidify Music Converter 1.2.9 - DLL Hijacking Code Execution Date Discovered : 2018-19-07 Affected Products: Sidify Music Converter v1.2.9 - Software Exploitation Technique: Local Severity Level: Medium Tested OS : Windows 7 &...

CVE-2018-14948

An issue has been found in dilawar sound through 2017-11-27. The end of openWavFile in wav-file.cc has Mismatched Memory Management Routines operator new versus operator delete...

CVE-2018-14948

The CVE-2018-14948 issue affects the dilawar sound library up to 2017-11-27, specifically the end of openWavFile in wav-file.cc. The root cause is a mismatched memory management routine: operator new[] versus operator delete. This mismatch can lead to memory corruption or related stability risks....

CVE-2018-14948: Improper Restriction of Operations within the Bounds of a Memory Buffer

An issue has been found in dilawar sound through 2017-11-27. The end of openWavFile in wav-file.cc has Mismatched Memory Management Routines operator new versus operator delete...

Security update for python (moderate)

This update for python fixes the following issues: The following security vulnerabilities were addressed: - Add a check to Lib/wave.py that verifies that at least one channel is provided. Prior to this, attackers could cause a denial of service via a crafted wav format audio file. bsc1083507,...

Denial Of Service (DoS)

libaudiofile.so is vulnerable to denial of service DoS attacks. An attacker can trigger the attack by sending a malicious WAV file to readValue function in FileHandle.cpp, causing a heap-based buffer overflow that can crash the application or execute arbitrary code...

SUSE-SU-2018:2040-1 Security update for python

This update for python fixes the following issues: The following security vulnerabilities were addressed: - Add a check to Lib/wave.py that verifies that at least one channel is provided. Prior to this, attackers could cause a denial of service via a crafted wav format audio file. bsc1083507,...

libwav denial of service vulnerability

libwav is a wav encoding library written in C language. A security vulnerability exists in the 'printinfo' function of the wavinfo/wavinfo.c file in libwav versions 2017-04-20 and earlier. An attacker can exploit this vulnerability to cause a denial of service segment error...

[SECURITY] Fedora 28 Update: soundtouch-2.0.0-3.fc28

SoundTouch is a LGPL-licensed open-source audio processing library for changing the Tempo, Pitch and Playback Rates of audio streams or files. The SoundTouch library is suited for application developers writing sound processing tools that require tempo/pitch control functionality, or just for...