7 matches found
MGASA-2023-0277 Updated flac packages fix security vulnerability
The updated packages fix a security vulnerability: Buffer Overflow vulnerability in function bitwritergrow in flac before 1.4.0 allows remote attackers to run arbitrary code via crafted input to the encoder. CVE-2020-22219...
MGASA-2022-0085 Updated flac packages fix security vulnerability
In appendtoverifyfifointerleaved of streamencoder.c, there is a possible out of bounds write due to a missing bounds check. This could lead to local information disclosure with no additional execution privileges needed. User interaction is not needed for exploitation. CVE-2021-0561...
MGASA-2020-0480 Updated flac packages fix security vulnerability
In FLACbitreaderreadricesignedblock of bitreader.c, there is a possible out of bounds read due to a heap buffer overflow. This could lead to remote information disclosure with no additional execution privileges needed. User interaction is needed for exploitation CVE-2020-0499...
MGASA-2018-0227 Updated flac packages fix security vulnerability
Memory leak in readmetadatavorbiscomment function could lead to denial of service CVE-2017-6888...
Updated flac packages fix security vulnerability
Memory leak in readmetadatavorbiscomment function could lead to denial of service CVE-2017-6888...
Updated flac packages fix security vulnerabilities
In libFLAC before 1.3.1, a stack overflow CVE-2014-8962 and a heap overflow CVE-2014-9028, which may result in arbitrary code execution, can be triggered by passing a maliciously crafted .flac file to the libFLAC decoder...
MGASA-2014-0499 Updated flac packages fix security vulnerabilities
In libFLAC before 1.3.1, a stack overflow CVE-2014-8962 and a heap overflow CVE-2014-9028, which may result in arbitrary code execution, can be triggered by passing a maliciously crafted .flac file to the libFLAC decoder...