CVE-2022-31650

In SoX 14.4.2, there is a floating-point exception in lsxaiffstartwrite in aiff.c in libsox.a...

Code injection

In SoX 14.4.2, there is a floating-point exception in lsxaiffstartwrite in aiff.c in libsox.a...

CVE-2022-31650

In SoX 14.4.2, there is a floating-point exception in lsxaiffstartwrite in aiff.c in libsox.a...

ALPINE-CVE-2022-31624

MariaDB Server before 10.7 is vulnerable to Denial of Service. While executing the plugin/serveraudit/serveraudit.c method logstatementex, the held lock lockbigbuffer is not released correctly, which allows local users to trigger a denial of service due to the deadlock...

archaius-core:DynamicPropertyFuzzer: Uncaught exception in java.base/java.util.Arrays.copyOf

Detailed Report: https://oss-fuzz.com/testcase?key=5532231940046848 Project: archaius-core Fuzzing Engine: libFuzzer Fuzz Target: DynamicPropertyFuzzer Job Type: libfuzzerasanarchaius-core Platform Id: linux Crash Type: Uncaught exception Crash Address: Crash State:...

xstream:XmlFuzzer: Uncaught exception in com.ctc.wstx.dtd.FullDTDReader.readContentSpec

Project: https://github.com/x-stream/xstream.git Detailed Report: https://oss-fuzz.com/testcase?key=4917343177801728 Project: xstream Fuzzing Engine: libFuzzer Fuzz Target: XmlFuzzer Job Type: libfuzzerasanxstream Platform Id: linux Crash Type: Uncaught exception Crash Address: Crash State:...

xstream:XmlFuzzer: Uncaught exception in com.ctc.wstx.dtd.FullDTDReader.readContentSpec

Detailed Report: https://oss-fuzz.com/testcase?key=5090175178375168 Project: xstream Fuzzing Engine: libFuzzer Fuzz Target: XmlFuzzer Job Type: libfuzzerasanxstream Platform Id: linux Crash Type: Uncaught exception Crash Address: Crash State: com.ctc.wstx.dtd.FullDTDReader.readContentSpec...

CVE-2022-31650

In SoX 14.4.2, there is a floating-point exception in lsxaiffstartwrite in aiff.c in libsox.a...

CVE-2022-31650: Incorrect Comparison

In SoX 14.4.2, there is a floating-point exception in lsxaiffstartwrite in aiff.c in libsox.a...

CVE-2022-31650

CVE-2022-31650 is a vulnerability in SoX 14.4.2 where a floating-point exception occurs in lsx_aiffstartwrite (aiff.c) of libsox.a. Multiple trusted sources (OpenSUSE/OpenSUSE advisory, Amazon Linux 2 ALAS advisory, Astra Linux bulletin, etc.) reference this exact flaw and note that it can lead t...

SoX 输入验证错误漏洞

SoX is a set of open source audio processing tools. The product supports playing, converting and recording audio in multiple formats. A security vulnerability exists in SoX version 14.4.2, which stems from a floating point exception in lsxaiffstartwrite in aiff.c in libsox.a. The vulnerability is...

PT-2022-6490 · Sox +4 · Sox +4

Name of the Vulnerable Software and Affected Versions: SoX version 14.4.2 Description: The issue is related to a floating-point exception in the lsx aiffstartwrite function in aiff.c in libsox.a. This vulnerability is associated with insufficient comparison, which may allow a remote attacker to...

CVE-2022-31650

In SoX 14.4.2, there is a floating-point exception in lsxaiffstartwrite in aiff.c in libsox.a...

CVE-2022-31650

In SoX 14.4.2, there is a floating-point exception in lsxaiffstartwrite in aiff.c in libsox.a...

Camaleon CMS vulnerable to Uncaught Exception

In Camaleon CMS, versions 2.0.1 through 2.6.0 are vulnerable to an Uncaught Exception. The app's media upload feature crashes permanently when an attacker with a low privileged access uploads a specially crafted .svg file...

GHSA-R2W2-H6R8-3R53 Camaleon CMS vulnerable to Uncaught Exception

In Camaleon CMS, versions 2.0.1 through 2.6.0 are vulnerable to an Uncaught Exception. The app's media upload feature crashes permanently when an attacker with a low privileged access uploads a specially crafted .svg file...

Missing permission check in Jenkins Cloud Statistics Plugin

Jenkins Cloud Statistics Plugin 0.26 and earlier does not perform a permission check in an HTTP endpoint. This allows attackers with Overall/Read permission and knowledge of random activity IDs to view related provisioning exception error messages. Jenkins Cloud Statistics Plugin 0.27 requires...

Diavante vue-storefront-api and storefront-api disclose stack trace

In Divante vue-storefront-api through 1.11.1 and storefront-api through 1.0-rc.1, as used in VueStorefront PWA, unexpected HTTP requests lead to an exception that discloses the error stack trace, with absolute file paths and Node.js module names...

OpenStack Nova Server Resource Faults Leak External Exception Details

An issue was discovered in OpenStack Nova before 17.0.12, 18.x before 18.2.2, and 19.x before 19.0.2. If an API request from an authenticated user ends in a fault condition due to an external exception, details of the underlying environment may be leaked in the response, and could include sensiti...

guice:InjectorFuzzer: Uncaught exception in jaz.Zer.<clinit>

Detailed Report: https://oss-fuzz.com/testcase?key=5182761838706688 Project: guice Fuzzing Engine: libFuzzer Fuzz Target: InjectorFuzzer Job Type: libfuzzerasanguice Platform Id: linux Crash Type: Uncaught exception Crash Address: Crash State: jaz.Zer. java.base/java.lang.Class.forName0...