taglib: heap-based buffer over-read via a crafted audio file

The TagLib::Ogg::FLAC::File::scan function in oggflacfile.cpp in TagLib 1.11.1 allows remote attackers to cause information disclosure heap-based buffer over-read via a crafted audio file...

Huawei EulerOS: Security Advisory for flac (EulerOS-SA-2019-1451)

The remote host is missing an update for the Huawei EulerOS SPDX-FileCopyrightText: 2020 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

Huawei EulerOS: Security Advisory for flac (EulerOS-SA-2019-2327)

The remote host is missing an update for the Huawei EulerOS SPDX-FileCopyrightText: 2020 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

flac:fuzzer_encoder: Crash in FLAC__bitwriter_write_raw_uint32_nocheck

Detailed Report: https://oss-fuzz.com/testcase?key=5770150330761216 Project: flac Fuzzing Engine: libFuzzer Fuzz Target: fuzzerencoder Job Type: libfuzzerasani386flac Platform Id: linux Crash Type: UNKNOWN WRITE Crash Address: 0xb6e29a2c Crash State: FLACbitwriterwriterawuint32nocheck...

flac:fuzzer_encoder: Crash in FLAC__bitwriter_free

Detailed Report: https://oss-fuzz.com/testcase?key=5718435866869760 Project: flac Fuzzing Engine: libFuzzer Fuzz Target: fuzzerencoder Job Type: libfuzzerasani386flac Platform Id: linux Crash Type: UNKNOWN WRITE Crash Address: 0x7a6fb7f0 Crash State: FLACbitwriterfree FLACstreamencoderfinish...

EulerOS Virtualization for ARM 64 3.0.3.0 : flac (EulerOS-SA-2019-2327)

According to the version of the flac package installed, the EulerOS Virtualization for ARM 64 installation on the remote host is affected by the following vulnerability : - An error in the 'readmetadatavorbiscomment' function src/libFLAC/streamdecoder.c in FLAC version 1.3.2 can be exploited to...

flac:fuzzer_encoder: Crash in FLAC__bitwriter_write_raw_uint32_nocheck

Project: https://github.com/xiph/flac.git Detailed Report: https://oss-fuzz.com/testcase?key=5697199728230400 Project: flac Fuzzing Engine: libFuzzer Fuzz Target: fuzzerencoder Job Type: libfuzzerasani386flac Platform Id: linux Crash Type: UNKNOWN WRITE Crash Address: 0xb61fb820 Crash State:...

flac:fuzzer_encoder: Crash in FLAC__bitwriter_free

Detailed Report: https://oss-fuzz.com/testcase?key=5648926757093376 Project: flac Fuzzing Engine: libFuzzer Fuzz Target: fuzzerencoder Job Type: libfuzzerasani386flac Platform Id: linux Crash Type: UNKNOWN WRITE Crash Address: 0x553c57f0 Crash State: FLACbitwriterfree FLACstreamencoderfinish...

flac:fuzzer_decoder: Heap-buffer-overflow in FLAC__bitreader_read_rice_signed_block

Project: https://github.com/xiph/flac.git Detailed Report: https://oss-fuzz.com/testcase?key=5670265022840832 Project: flac Fuzzing Engine: libFuzzer Fuzz Target: fuzzerdecoder Job Type: libfuzzerasanflac Platform Id: linux Crash Type: Heap-buffer-overflow READ 4 Crash Address: 0x625000002100 Cra...

FLAC -- out-of-bounds read

Oss-Fuzz reports: There is a possible out of bounds read due to a heap buffer overflow in FLACbitreaderreadricesignedblock of bitreader.c...

flac:fuzzer_decoder: Use-of-uninitialized-value in FLAC::Decoder::FuzzerStream::write_callback

Project: https://github.com/xiph/flac.git Detailed Report: https://oss-fuzz.com/testcase?key=5735564778668032 Project: flac Fuzzing Engine: libFuzzer Fuzz Target: fuzzerdecoder Job Type: libfuzzermsanflac Platform Id: linux Crash Type: Use-of-uninitialized-value Crash Address: Crash State:...

flac:fuzzer_decoder: Crash in FLAC__crc16_update_words32

Project: https://github.com/xiph/flac.git Detailed Report: https://oss-fuzz.com/testcase?key=5076189185572864 Project: flac Fuzzing Engine: libFuzzer Fuzz Target: fuzzerdecoder Job Type: libfuzzermsanflac Platform Id: linux Crash Type: UNKNOWN READ Crash Address: 0x724000010000 Crash State:...

EulerOS Virtualization 3.0.1.0 : flac (EulerOS-SA-2019-1451)

According to the versions of the flac package installed, the EulerOS Virtualization installation on the remote host is affected by the following vulnerabilities : - A buffer overflow flaw was found in the way flac decoded FLAC audio files. An attacker could create a specially crafted FLAC audio...

Arbitrary Code Executionary

The flac packages contain a decoder and an encoder for the FLAC Free Lossless Audio Codec audio file format. A buffer overflow flaw was found in the way flac decoded FLAC audio files. An attacker could create a specially crafted FLAC audio file that could cause an application using the flac libra...

openSUSE Security Update : flac (openSUSE-2019-1225)

This update for flac fixes the following issues : - CVE-2017-6888: An error in the 'readmetadatavorbiscomment' function could be exploited to cause a memory leak via a specially crafted FLAC file bsc1091045. This update was imported from the SUSE:SLE-15:Update update project. %NASLMINLEVEL 70300 ...

openSUSE: Security Advisory for flac (openSUSE-SU-2019:1225-1)

The remote host is missing an update for the Copyright C 2019 Greenbone Networks GmbH Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-or-later This program is free software; you can...

OPENSUSE-SU-2019:1225-1 Security update for flac

This update for flac fixes the following issues: - CVE-2017-6888: An error in the 'readmetadatavorbiscomment' function could be exploited to cause a memory leak via a specially crafted FLAC file bsc1091045. This update was imported from the SUSE:SLE-15:Update update project...

Security update for flac (low)

openSUSE Security Update: Security update for flac Announcement ID: openSUSE-SU-2019:1225-1 Rating: low References: 1091045 Cross-References: CVE-2017-6888 Affected Products: openSUSE Leap 15.0 An update that fixes one vulnerability is now available. Description: This update for flac fixes the...

SUSE SLED15 / SLES15 Security Update : flac (SUSE-SU-2019:0920-1)

This update for flac fixes the following issues : CVE-2017-6888: An error in the 'readmetadatavorbiscomment' function could be exploited to cause a memory leak via a specially crafted FLAC file bsc1091045. Note that Tenable Network Security has extracted the preceding description block directly...

SUSE-SU-2019:0920-1 Security update for flac

This update for flac fixes the following issues: - CVE-2017-6888: An error in the 'readmetadatavorbiscomment' function could be exploited to cause a memory leak via a specially crafted FLAC file bsc1091045...