Lucene search
+L

7789 matches found

OSV
OSV
added 2024/04/12 6:15 a.m.1 views

DEBIAN-CVE-2023-49528

Buffer Overflow vulnerability in FFmpeg version n6.1-3-g466799d4f5, allows a local attacker to execute arbitrary code and cause a denial of service DoS via the afdialoguenhance.c:261:5 in the destereo component...

8CVSS7.3AI score0.00396EPSS
SaveExploits1References1
UbuntuCve
UbuntuCve
added 2024/04/12 6:15 a.m.22 views

CVE-2023-49528

Buffer Overflow vulnerability in FFmpeg version n6.1-3-g466799d4f5, allows a local attacker to execute arbitrary code and cause a denial of service DoS via the afdialoguenhance.c:261:5 in the destereo component...

8CVSS7.1AI score0.00396EPSS
SaveExploits1References3
OSV
OSV
added 2024/04/12 6:15 a.m.9 views

UBUNTU-CVE-2023-49528

Buffer Overflow vulnerability in FFmpeg version n6.1-3-g466799d4f5, allows a local attacker to execute arbitrary code and cause a denial of service DoS via the afdialoguenhance.c:261:5 in the destereo component...

8CVSS7.1AI score0.00396EPSS
SaveExploits1References4
Positive Technologies
Positive Technologies
added 2024/04/12 12:0 a.m.6 views

PT-2024-4526 · FFmpeg +4 · Ffmpeg +4

Name of the Vulnerable Software and Affected Versions: FFmpeg version n6.1-3-g466799d4f5 Description: The issue is related to a buffer overflow in the de stereo component of the FFmpeg library, specifically in the af dialoguenhance.c file. This allows a local attacker to execute arbitrary code an...

8.8CVSS7.3AI score0.01545EPSS
SaveExploits7References92
Vulnrichment
Vulnrichment
added 2024/04/12 12:0 a.m.18 views

CVE-2023-49528

Buffer Overflow vulnerability in FFmpeg version n6.1-3-g466799d4f5, allows a local attacker to execute arbitrary code and cause a denial of service DoS via the afdialoguenhance.c:261:5 in the destereo component...

7.5AI score0.00396EPSS
SaveExploits1References4
OSV
OSV
added 2024/04/12 12:0 a.m.13 views

CVE-2023-49528

Buffer Overflow vulnerability in FFmpeg version n6.1-3-g466799d4f5, allows a local attacker to execute arbitrary code and cause a denial of service DoS via the afdialoguenhance.c:261:5 in the destereo component...

8CVSS8AI score
SaveExploits0References9
CNNVD
CNNVD
added 2024/04/12 12:0 a.m.11 views

FFmpeg 安全漏洞

FFmpeg is a complete solution for recording, converting and streaming audio and video from the FFmpeg team. A buffer overflow vulnerability exists in FFmpeg version n6.1-3-g466799d4f5, which can be exploited by an attacker to execute arbitrary code and cause a denial of service DoS via...

8CVSS7.9AI score0.00396EPSS
SaveExploits1References2
CVE
CVE
added 2024/04/12 12:0 a.m.97 views

CVE-2023-49528

CVE-2023-49528 : FFmpeg has a local, buffer overflow in the de_stereo path (af_dialoguenhance.c:261) on version n6.1-3-g466799d4f5, enabling arbitrary code execution and DoS. Connected advisories confirm the vulnerability in FFmpeg’s af_dialoguenhance.c and note affected builds across distributio...

8CVSS7.2AI score0.00396EPSS
SaveExploits1References7Affected Software1
Debian CVE
Debian CVE
added 2024/04/12 12:0 a.m.63 views

CVE-2023-49528

Buffer Overflow vulnerability in FFmpeg version n6.1-3-g466799d4f5, allows a local attacker to execute arbitrary code and cause a denial of service DoS via the afdialoguenhance.c:261:5 in the destereo component...

8CVSS7AI score0.00396EPSS
SaveExploits1
Cvelist
Cvelist
added 2024/04/12 12:0 a.m.40 views

CVE-2023-49528

Buffer Overflow vulnerability in FFmpeg version n6.1-3-g466799d4f5, allows a local attacker to execute arbitrary code and cause a denial of service DoS via the afdialoguenhance.c:261:5 in the destereo component...

9.3AI score0.00396EPSS
SaveExploits1References4
Github Security Blog
Github Security Blog
added 2024/04/10 6:30 p.m.33 views

LocalAI Command Injection in audioToWav

A command injection vulnerability exists in the TranscriptEndpoint of mudler/localai, specifically within the audioToWav function used for converting audio files to WAV format for transcription. The vulnerability arises due to the lack of sanitization of user-supplied filenames before passing the...

9.8CVSS8.1AI score0.02879EPSS
SaveExploits1References4Affected Software1
OSV
OSV
added 2024/04/10 6:30 p.m.56 views

GHSA-WX43-G55G-2JF4 LocalAI Command Injection in audioToWav

A command injection vulnerability exists in the TranscriptEndpoint of mudler/localai, specifically within the audioToWav function used for converting audio files to WAV format for transcription. The vulnerability arises due to the lack of sanitization of user-supplied filenames before passing the...

9.8CVSS9.8AI score0.02879EPSS
SaveExploits1References4
NVD
NVD
added 2024/04/10 5:15 p.m.23 views

CVE-2024-2029

A command injection vulnerability exists in the TranscriptEndpoint of mudler/localai, specifically within the audioToWav function used for converting audio files to WAV format for transcription. The vulnerability arises due to the lack of sanitization of user-supplied filenames before passing the...

9.8CVSS9.8AI score0.02879EPSS
SaveExploits1References2
Cvelist
Cvelist
added 2024/04/10 5:8 p.m.39 views

CVE-2024-2029 Command Injection in mudler/localai

A command injection vulnerability exists in the TranscriptEndpoint of mudler/localai, specifically within the audioToWav function used for converting audio files to WAV format for transcription. The vulnerability arises due to the lack of sanitization of user-supplied filenames before passing the...

9.8CVSS10AI score0.02879EPSS
SaveExploits1References2
OSV
OSV
added 2024/04/10 5:8 p.m.22 views

CVE-2024-2029 Command Injection in mudler/localai

A command injection vulnerability exists in the TranscriptEndpoint of mudler/localai, specifically within the audioToWav function used for converting audio files to WAV format for transcription. The vulnerability arises due to the lack of sanitization of user-supplied filenames before passing the...

9.8CVSS6.2AI score
SaveExploits0References4
CNNVD
CNNVD
added 2024/04/10 12:0 a.m.7 views

localai 操作系统命令注入漏洞

LocalAI is a free, open source alternative to OpenAI from the individual developer Ettore Di Giacinto. localai suffers from an operating system command injection vulnerability that stems from failure to clean up a user-supplied filename before passing it to ffmpeg via a shell command, allowing an...

9.8CVSS9.7AI score0.02879EPSS
SaveExploits1References3
OpenVAS
OpenVAS
added 2024/04/05 12:0 a.m.16 views

Mageia: Security Advisory (MGASA-2024-0083)

The remote host is missing an update for the SPDX-FileCopyrightText: 2024 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

8.2AI score
SaveExploits0References4
Positive Technologies
Positive Technologies
added 2024/03/27 12:0 a.m.1 views

PT-2024-10419 · FFmpeg +3 · Ffmpeg +3

Name of the Vulnerable Software and Affected Versions: FFmpeg version 6.1.1 Description: The issue is related to an integer overflow in the libavformat/westwood vqa.c component of the FFmpeg library. This can be exploited by a remote attacker using a specially crafted VQA file, potentially leadin...

9.1CVSS6AI score0.01512EPSS
SaveExploits3References57
Positive Technologies
Positive Technologies
added 2024/03/26 12:0 a.m.4 views

PT-2024-10418

Name of the Vulnerable Software and Affected Versions FFmpeg version 6.1.1 Description The issue is related to an integer overflow in the FFmpeg CAF decoder. This could potentially allow an attacker to cause a denial of service. Recommendations For version 6.1.1, consider updating to a newer...

6.5CVSS6.8AI score0.0056EPSS
SaveExploits0References56
Positive Technologies
Positive Technologies
added 2024/03/26 12:0 a.m.4 views

PT-2025-2441 · FFmpeg +2 · Ffmpeg +2

Name of the Vulnerable Software and Affected Versions: FFmpeg version n6.1.1 Description: The issue is a double-free vulnerability in the fftools/ffmpeg mux init.c component of FFmpeg, specifically within the new stream audio function. This vulnerability occurs in the audio processing component o...

10CVSS5.7AI score0.00715EPSS
SaveExploits0References74
Rows per page
Query Builder