CVE-2025-31787: Missing Authorization

Missing Authorization vulnerability in AudioTheme Cue cue allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects Cue: from n/a through = 2.4.4...

GHSA-J6M3-GC37-6R6Q vulnerabilities

Vulnerabilities for packages: timoni, kor, speedtest-go, bazelisk, vt-cli, secrets-store-csi-driver-provider-aws, kustomize, pulumi, grype, tflint, goreleaser, kubebuilder, terraform-docs, nri-haproxy, go-bindata, kubeflow-pipelines, pulumi-language-java, terraform, nats-server, supercronic, nats...

GHSA-FGQ5-Q76C-GX78 vulnerabilities

Vulnerabilities for packages: timoni, kor, speedtest-go, bazelisk, vt-cli, secrets-store-csi-driver-provider-aws, kustomize, pulumi, grype, tflint, goreleaser, kubebuilder, terraform-docs, nri-haproxy, go-bindata, kubeflow-pipelines, pulumi-language-java, terraform, nats-server, supercronic, nats...

The vulnerability of the gst_wavparse_cue_chunk function in the Gstreamer multimedia framework, which allows a hacker to access confidential information

The vulnerability of the gstwavparsecuechunk function in the Gstreamer multimedia framework relates to reading data outside of the allowed range by the WAV parser. Exploiting this vulnerability can allow a remote attacker to gain access to confidential information...

SUSE CVE-2024-47776

GStreamer is a library for constructing graphs of media-handling components. An OOB-read has been discovered in gstwavparsecuechunk within gstwavparse.c. The vulnerability happens due to a discrepancy between the size of the data buffer and the size value provided to the function. This mismatch...

AZL-62372 CVE-2024-47776 affecting package gstreamer1 1.20.0-2

GStreamer is a library for constructing graphs of media-handling components. An OOB-read has been discovered in gstwavparsecuechunk within gstwavparse.c. The vulnerability happens due to a discrepancy between the size of the data buffer and the size value provided to the function. This mismatch...

DEBIAN-CVE-2024-47776

GStreamer is a library for constructing graphs of media-handling components. An OOB-read has been discovered in gstwavparsecuechunk within gstwavparse.c. The vulnerability happens due to a discrepancy between the size of the data buffer and the size value provided to the function. This mismatch...

UBUNTU-CVE-2024-47776

GStreamer is a library for constructing graphs of media-handling components. An OOB-read has been discovered in gstwavparsecuechunk within gstwavparse.c. The vulnerability happens due to a discrepancy between the size of the data buffer and the size value provided to the function. This mismatch...

GStreamer 缓冲区错误漏洞

GStreamer is the GStreamer open source set of frameworks for processing streaming media. GStreamer suffers from a buffer error vulnerability that stems from an out-of-bounds read vulnerability found in gstwavparsecuechunk in gstwavparse.c...

The vulnerability of the component `spexrmpict_request_frame` (libavfilter/avf_showspectrum.c) in the FFmpeg multimedia library allows a attacker to execute arbitrary code.

The vulnerability of the spectrumpicrequestframe component in the FFmpeg multimedia library libavfilter/avfshowspectrum.c is related to buffer overflow in the “cue” section. Exploiting this vulnerability could allow an attacker to execute arbitrary code...

Malicious code in cue-vana-3-john-wick-4-iv-2023-ver-en-espanol-latino-descargar-la-pelicula-completa-esp127456 (npm)

--- -= Per source details. Do not edit below this line.=-...

CVE-2024-24788 vulnerabilities

Vulnerabilities for packages: harbor-scanner-trivy-fips, prometheus-postgres-exporter, overmind, prometheus-elasticsearch-exporter-fips, bom, mongo-tools, karpenter, wave, prometheus-nats-exporter, caddy-fips, mage, melange, docker-credential-acr-env, prometheus-alertmanager, vault-k8s, kustomize...

Fedora 39 : libcue (2023-f4e74a94a2)

The remote Fedora 39 host has a package installed that is affected by a vulnerability as referenced in the FEDORA-2023-f4e74a94a2 advisory. This update backports the fix for a serious security issue that could cause arbitrary code execution, tracked as CVE-2023-43641. See this write-up by Kevin...

Updated libcue packages fix a security vulnerability

Versions 2.2.1 and prior are vulnerable to out-of-bounds array access. A user of the GNOME desktop environment can be exploited by downloading a cue sheet from a malicious webpage. Because the file is saved to /Downloads, it is then automatically scanned by tracker-miners. And because it has a .c...

OESA-2023-1745 libcue security update

Libcue is intended for parsing a so-called cue sheet from a char string or a file pointer. For handling of the parsed data a convenient API is available. Security Fixes: libcue provides an API for parsing and extracting data from CUE sheets. Versions 2.2.1 and prior are vulnerable to out-of-bound...

OESA-2023-1743 libcue security update

Libcue is intended for parsing a so-called cue sheet from a char string or a file pointer. For handling of the parsed data a convenient API is available. Security Fixes: libcue provides an API for parsing and extracting data from CUE sheets. Versions 2.2.1 and prior are vulnerable to out-of-bound...

OESA-2023-1744 libcue security update

Libcue is intended for parsing a so-called cue sheet from a char string or a file pointer. For handling of the parsed data a convenient API is available. Security Fixes: libcue provides an API for parsing and extracting data from CUE sheets. Versions 2.2.1 and prior are vulnerable to out-of-bound...

Ubuntu 23.10 : CUE vulnerability (USN-6423-2)

The remote Ubuntu 23.10 host has packages installed that are affected by a vulnerability as referenced in the USN-6423-2 advisory. USN-6423-1 fixed a vulnerability in CUE. This update provides the corresponding updates for Ubuntu 23.10. Tenable has extracted the preceding description block direct...

Ubuntu: Security Advisory (USN-6423-2)

The remote host is missing an update for the SPDX-FileCopyrightText: 2023 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

SUSE SLED15 / SLES15 Security Update : libcue (SUSE-SU-2023:4090-1)

The remote SUSE Linux SLED15 / SLEDSAP15 / SLES15 / SLESSAP15 host has packages installed that are affected by a vulnerability as referenced in the SUSE-SU-2023:4090-1 advisory. - CVE-2023-43641: Fixed a buffer overflow while parsing a malicious file bsc1215728. Tenable has extracted the precedin...