PT-2021-22632

Name of the Vulnerable Software and Affected Versions: sela versions through 20200412 Description: An issue exists in the function file::WavFile::WavFile located in wav file.c, where a NULL pointer dereference can occur. This allows an attacker to cause Denial of Service. Recommendations: For...

CVE-2021-39552: Out-of-bounds Write

An issue was discovered in sela through 20200412. file::WavFile::readFromFile in wavfile.c has a heap-based buffer overflow...

CVE-2021-39549: NULL Pointer Dereference

An issue was discovered in sela through 20200412. A NULL pointer dereference exists in the function file::WavFile::WavFile located in wavfile.c. It allows an attacker to cause Denial of Service...

PT-2021-22627

Name of the Vulnerable Software and Affected Versions: sela through 20200412 Description: An issue was discovered in the file::WavFile::writeToFile function in wav file.c, which has a heap-based buffer overflow. Recommendations: For sela through 20200412, as a temporary workaround, consider...

SoundTouch Denial of Service Vulnerability (CNVD-2019-17470)

SoundTouch is an open source audio processing library for changing the Tempo, Pitch and Playback Rates of an audio stream or audio file. A denial of service vulnerability exists in the WavFileBase class in WavFile.cpp in SoundTouch 2.0, which can be exploited by remote attackers to cause a denial...

Buffer overflow

soundtouch version up to and including 2.0.0 contains a Buffer Overflow vulnerability in SoundStretch/WavFile.cpp:WavInFile::readHeaderBlock that can result in arbitrary code execution. This attack appear to be exploitable via victim must open maliocius file in soundstretch utility...