ffmpeg:ffmpeg_dem_AIFF_fuzzer: Use-of-uninitialized-value in aiff_read_header

Project: https://git.ffmpeg.org/ffmpeg.git https://github.com/FFmpeg/FFmpeg.git Detailed Report: https://oss-fuzz.com/testcase?key=6406386140643328 Project: ffmpeg Fuzzing Engine: libFuzzer Fuzz Target: ffmpegdemAIFFfuzzer Job Type: libfuzzermsanffmpeg Platform Id: linux Crash Type:...

libsndfile:sndfile_fuzzer: Use-of-uninitialized-value in psf_log_printf

Project: https://github.com/libsndfile/libsndfile.git Detailed Report: https://oss-fuzz.com/testcase?key=5961843607339008 Project: libsndfile Fuzzing Engine: libFuzzer Fuzz Target: sndfilefuzzer Job Type: libfuzzermsanlibsndfile Platform Id: linux Crash Type: Use-of-uninitialized-value Crash...

openSUSE 10 Security Update : libsndfile (libsndfile-6277)

This update of libsndfile fixes a heap-based buffer overflow in vocreadheader CVE-2009-1788 and a heap-based buffer overflow in aiffreadheader CVE-2009-1791. %NASLMINLEVEL 70300 C Tenable Network Security, Inc. The descriptive text and package checks in this plugin were extracted from openSUSE...

CVE-2009-1791: Improper Restriction of Operations within the Bounds of a Memory Buffer

Heap-based buffer overflow in aiffreadheader in libsndfile 1.0.15 through 1.0.19, as used in Winamp 5.552 and possibly other media programs, allows remote attackers to cause a denial of service application crash and possibly execute arbitrary code via an AIFF file with an invalid header value...

libsndfile -- multiple vulnerabilities

Secunia reports: Two vulnerabilities have been reported in libsndfile, which can be exploited by malicious people to compromise an application using the library. A boundary error exists within the "vocreadheader" function in src/voc.c. This can be exploited to cause a heap-based buffer overflow v...