851 matches found
CVE-2025-14369 CVE-2025-14369
drflac, an audio decoder within the drlibs toolset, contains an integer overflow vulnerability flaw due to trusting the totalPCMFrameCount field from FLAC metadata before calculating buffer size, allowing an attacker with a specially crafted file to perform DoS against programs using the tool...
CVE-2025-14369
drflac, an audio decoder within the drlibs toolset, contains an integer overflow vulnerability flaw due to trusting the totalPCMFrameCount field from FLAC metadata before calculating buffer size, allowing an attacker with a specially crafted file to perform DoS against programs using the tool...
dr_libs security vulnerabilities
drlibs is an audio decoding library developed by David Reid. drlibs has a security vulnerability that stems from trusting the totalPCMFrameCount field in FLAC metadata. This vulnerability may lead to integer overflows, allowing attackers to launch denial-of-service attacks on programs that use th...
PT-2026-3551
Name of the Vulnerable Software and Affected Versions dr flac affected versions not specified Description The dr flac audio decoder, part of the dr libs toolset, has a flaw where it improperly handles the totalPCMFrameCount field within FLAC metadata. This can lead to an integer overflow when...
MiracleLinux 9 : gstreamer1-plugins-good-1.22.1-2.el9 (AXSA:2024-8036:01)
The remote MiracleLinux 9 host has packages installed that are affected by a vulnerability as referenced in the AXSA:2024-8036:01 advisory. gstreamer-plugins-good: integer overflow leading to heap overwrite in FLAC image tag handling CVE-2023-37327 Tenable has extracted the preceding description...
MiracleLinux 9 : flac-1.3.3-10.el9.1 (AXSA:2023-6394:02)
The remote MiracleLinux 9 host has packages installed that are affected by a vulnerability as referenced in the AXSA:2023-6394:02 advisory. flac: Remote Code Execution RCE via the bitwritergrow function, by supplying crafted input to the encoder CVE-2020-22219 Tenable has extracted the preceding...
MiracleLinux 8 : flac-1.3.2-9.el8.1 (AXSA:2023-6402:03)
The remote MiracleLinux 8 host has packages installed that are affected by a vulnerability as referenced in the AXSA:2023-6402:03 advisory. flac: Remote Code Execution RCE via the bitwritergrow function, by supplying crafted input to the encoder CVE-2020-22219 Tenable has extracted the preceding...
MiracleLinux 9 : flac-1.3.3-10.el9 (AXSA:2023-4696:01)
The remote MiracleLinux 9 host has packages installed that are affected by a vulnerability as referenced in the AXSA:2023-4696:01 advisory. flac: out of bound write in appendtoverifyfifointerleaved of streamencoder.c CVE-2021-0561 Tenable has extracted the preceding description block directly fro...
dr_flac contains an integer overflow vulnerability that allows for DoS when provided a crafted file
Overview drflac, an open-source FLAC audio decoder, part of the drlibs audio decoder toolset, contains an integer overflow vulnerability allowing for denial of service DoS when provided a specific crafted file. An attacker can exploit this vulnerability through providing a tool that uses drflac a...
MiracleLinux 8 : gstreamer1-plugins-good-1.16.1-4.el8 (AXSA:2024-8317:02)
The remote MiracleLinux 8 host has packages installed that are affected by a vulnerability as referenced in the AXSA:2024-8317:02 advisory. gstreamer-plugins-good: integer overflow leading to heap overwrite in FLAC image tag handling CVE-2023-37327 Tenable has extracted the preceding description...
MiracleLinux 4 : flac-1.2.1-7.AXS4 (AXSA:2015-100:01)
The remote MiracleLinux 4 host has a package installed that is affected by multiple vulnerabilities as referenced in the AXSA:2015-100:01 advisory. Description: The flac packages contain a decoder and an encoder for the FLAC Free Lossless Audio Codec audio file format. Security issues fixed with...
CVE-2009-4676
Stack-based buffer overflow in JetCast.exe 2.0.4.1109 in jetAudio 7.5.2 and 7.5.3.15 allows remote attackers to execute arbitrary code via a long title in a FLAC file. NOTE: the provenance of this information is unknown; the details are obtained solely from third party information...
[SECURITY] [DLA 4402-1] libsndfile security update
------------------------------------------------------------------------- Debian LTS Advisory DLA-4402-1 [email protected] https://www.debian.org/lts/security/ Bastien Roucariès December 11, 2025 https://wiki.debian.org/LTS -...
EUVD-2018-3325
Malware in sbrugna...
EUVD-2009-4640
Malware in sbrugna...
EUVD-2017-16590
Malware in sbrugna...
EUVD-2018-17649
Malware in sbrugna...
EUVD-2008-0496
Malware in sbrugna...