PT-2026-99319

Name of the Vulnerable Software and Affected Versions vllm versions prior to 0.29.0 Description The software fails to enforce the VLLM MAX AUDIO CLIP FILESIZE MB limit during multimodal chat audio decoding. This allows unauthenticated clients to bypass file size restrictions by submitting oversiz...

CVE-2021-35104

CVE-2021-35104 concerns Qualcomm closed‑source components with a buffer overflow caused by improper header parsing when playing FLAC audio clips in Snapdragon driver/software stacks. The vulnerability is described as a critical issue (CVSS v3.1: AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H; base score 9.8...

CVE-2021-35104: Buffer Copy without Checking Size of Input

Possible buffer overflow due to improper parsing of headers while playing the FLAC audio clip in Snapdragon Auto, Snapdragon Compute, Snapdragon Connectivity, Snapdragon Consumer IOT, Snapdragon Industrial IOT, Snapdragon Voice & Music, Snapdragon Wearables, Snapdragon Wired Infrastructure and...

Bento4 Null Pointer Dereference Vulnerability (CNVD-2019-28478)

Bento4 is a C++ class library and tool for reading and writing ISO-MP4 files. A null pointer dereference vulnerability exists in AP4Track::GetSampleIndexForTimeStampMs in Core/Ap4Track.cpp in Bento4 1.5.1-628, which can be exploited by an attacker to cause a denial of service by sending a special...