[SECURITY] Fedora 33 Update: dr_libs-0-0.5.20211002gitf13cbcf.fc33

Single-file audio decoding libraries for C/C++...

Debian: Security Advisory (DLA-2772-1)

The remote host is missing an update for the Debian SPDX-FileCopyrightText: 2021 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

[SECURITY] [DLA 2772-1] taglib security update

------------------------------------------------------------------------- Debian LTS Advisory DLA-2772-1 [email protected] https://www.debian.org/lts/security/ Adrian Bunk September 30, 2021 https://wiki.debian.org/LTS -...

[SECURITY] Fedora 35 Update: libopenmpt-0.5.11-1.fc35

libopenmpt is a cross-platform C++ and C library to decode tracked music files modules into a raw PCM audio stream. libopenmpt is based on the player code of the OpenMPT project Open ModPlug Tracker. In order to avoid code base fragmentation, libopenmpt is developed in the same source code...

FFmpeg integer overflow vulnerability (CNVD-2021-80286)

FFmpeg is the FFmpeg team's complete solution for recording, converting, and streaming audio and video. ffmpeg suffers from an integer overflow vulnerability that could be exploited by an attacker to cause a denial of service or other unspecified impact...

FFmpeg integer overflow vulnerability (CNVD-2021-80288)

FFmpeg is the FFmpeg team's complete solution for recording, converting, and streaming audio and video. ffmpeg suffers from an integer overflow vulnerability that could be exploited by an attacker to cause a denial of service or other unspecified impact...

FAAD2 Heap Buffer Overflow Vulnerability (CNVD-2021-89951)

Freeware Advanced Audio Decoder 2 FAAD2 is an open source MPEG-4 and MPEG-2 AAC decoder licensed under the GPLv2 license. a heap buffer overflow vulnerability exists in the stszin function in mp4read.c in FAAD2 version 2.10.0 and earlier. An attacker could exploit this vulnerability to execute co...

FFmpeg Information Disclosure Vulnerability (CNVD-2021-80285)

FFmpeg is a complete solution for recording, converting, and streaming audio and video from the FFmpeg team. FFmpeg is vulnerable to an information disclosure. No detailed vulnerability details are available at this time...

FFmpeg Buffer Overflow Vulnerability (CNVD-2021-74090)

FFmpeg is the FFmpeg team's complete solution for recording, converting, and streaming audio and video. ffmpeg has a security vulnerability that could be exploited by an attacker to cause a denial of service or other unspecified impact...

SELA heap buffer overflow vulnerability

SELA is a lossless audio codec. a heap buffer overflow vulnerability exists in file::WavFile::writeToFile in wavfile.c in SELA 20200412 and earlier versions. No detailed vulnerability details are currently available...

SELA null pointer dereference vulnerability (CNVD-2021-73934)

SELA is a lossless audio codec. A null pointer dereference vulnerability exists in the file::WavFile::WavFile function in wavfile.c in SELA 20200412 and earlier versions. An attacker could exploit this vulnerability to cause a denial of service...

SELA Heap Buffer Overflow Vulnerability (CNVD-2021-73936)

SELA is a lossless audio codec. file::SelaFile::readFromFile in selafile.c in SELA 20200412 and earlier versions is vulnerable to a heap buffer overflow. No detailed vulnerability details are available at this time...

SELA Heap Buffer Overflow Vulnerability (CNVD-2021-73935)

SELA is a lossless audio codec. file::SelaFile::readFromFile in selafile.cpp in SELA 20200412 and earlier versions is vulnerable to a heap buffer overflow. No detailed vulnerability details are currently available...

SELA null pointer dereference vulnerability (CNVD-2021-73930)

SELA is a lossless audio codec. a null pointer dereference vulnerability exists in the rice::RiceDecoder::process function in ricedecoder.c in SELA 20200412 and earlier versions. An attacker can exploit this vulnerability to cause a denial of service...

SELA null pointer dereference vulnerability (CNVD-2021-73933)

SELA is a lossless audio codec. A null pointer dereference vulnerability exists in the frame::FrameDecoder::process function in framedecoder.c in SELA 20200412 and earlier versions. An attacker can exploit this vulnerability to cause a denial of service...

SELA null pointer dereference vulnerability (CNVD-2021-73932)

SELA is a lossless audio codec. lpc::SampleGenerator::process function in samplegenerator.cpp in SELA 20200412 and earlier versions is vulnerable to a null pointer dereference. An attacker could exploit this vulnerability to cause a denial of service...

Faad2 缓冲区错误漏洞

Freeware Advanced Audio Decoder 2 FAAD2 is an open source MPEG-4 and MPEG-2 AAC decoder licensed under the GPLv2 license. a heap buffer overflow vulnerability exists in the stszin function in mp4read.c in FAAD2 version 2.10.0 and earlier. An attacker could exploit this vulnerability to execute co...

Faad2 缓冲区错误漏洞

Freeware Advanced Audio Decoder 2 FAAD2 is an open source MPEG-4 and MPEG-2 AAC decoder licensed under the GPLv2 license. a stack buffer overflow vulnerability exists in the ftypin function in mp4read.c in FAAD2 2.10.0 and earlier versions. An attacker could exploit this vulnerability to execute...

WordPress Html5 Audio Player plugin <= 2.1.2 - Stored Cross-Site Scripting (XSS) vulnerability

Stored Cross-Site Scripting XSS vulnerability discovered by Michał Lipiński WordPress Html5 Audio Player plugin versions = 2.1.2. Solution Update the WordPress Html5 Audio Player plugin to the latest available version at least 2.1.3...

Html5 Audio Player < 2.1.3 - Contributor+ Stored Cross-Site Scripting

The plugin does not sanitise or validate the parameters from its shortcode, allowing users with a role as low as contributor to set Cross-Site Scripting payload in them which will be triggered in the page/s with the embed malicious shortcode Log in as contributor and add the following shortcode i...