flac:fuzzer_decoder: Use-of-uninitialized-value in fuzzing::memory::memory_test_msan

Project: https://github.com/xiph/flac.git Detailed Report: https://oss-fuzz.com/testcase?key=5769553180360704 Project: flac Fuzzing Engine: libFuzzer Fuzz Target: fuzzerdecoder Job Type: libfuzzermsanflac Platform Id: linux Crash Type: Use-of-uninitialized-value Crash Address: Crash State:...

Denial Of Service (DoS)

libsndfile is vulnerable to denial of service DoS. The vulnerability exists as an error in the flacbuffercopy function flac.c can be exploited to cause a segmentation violation with read memory access via a specially crafted FLAC file during a resample attempt, a similar issue to CVE-2017-7585...

Denial Of Service (DoS)

libsndfile is vulnerable to denial of service DoS. The vulnerability exists as an error in the flacbuffercopy function flac.c can be exploited to cause a segmentation violation with write memory access via a specially crafted FLAC file during a resample attempt, a similar issue to CVE-2017-7585...

FreeBSD : taglib -- heap-based buffer over-read via a crafted audio file (d3f3e818-8d10-11ea-8668-e0d55e2a8bf9)

Webin security lab - dbapp security Ltd reports : The TagLib::Ogg::FLAC::File::scan function in oggflacfile.cpp in TagLib 1.11.1 allows remote attackers to cause information disclosure heap-based buffer over-read via a crafted audio file. C Tenable Network Security, Inc. The descriptive text and...

taglib security update

1.8-8.20130218git - Fixed OOB read when loading invalid ogg flac file Resolves: bz1585260...

taglib: heap-based buffer over-read via a crafted audio file

The TagLib::Ogg::FLAC::File::scan function in oggflacfile.cpp in TagLib 1.11.1 allows remote attackers to cause information disclosure heap-based buffer over-read via a crafted audio file...

Huawei EulerOS: Security Advisory for flac (EulerOS-SA-2019-1451)

The remote host is missing an update for the Huawei EulerOS SPDX-FileCopyrightText: 2020 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

Huawei EulerOS: Security Advisory for flac (EulerOS-SA-2019-2327)

The remote host is missing an update for the Huawei EulerOS SPDX-FileCopyrightText: 2020 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

flac:fuzzer_encoder: Crash in FLAC__bitwriter_write_raw_uint32_nocheck

Project: https://github.com/xiph/flac.git Detailed Report: https://oss-fuzz.com/testcase?key=5770150330761216 Project: flac Fuzzing Engine: libFuzzer Fuzz Target: fuzzerencoder Job Type: libfuzzerasani386flac Platform Id: linux Crash Type: UNKNOWN WRITE Crash Address: 0xb6e29a2c Crash State:...

flac:fuzzer_encoder: Crash in FLAC__bitwriter_free

Project: https://github.com/xiph/flac.git Detailed Report: https://oss-fuzz.com/testcase?key=5718435866869760 Project: flac Fuzzing Engine: libFuzzer Fuzz Target: fuzzerencoder Job Type: libfuzzerasani386flac Platform Id: linux Crash Type: UNKNOWN WRITE Crash Address: 0x7a6fb7f0 Crash State:...

EulerOS Virtualization for ARM 64 3.0.3.0 : flac (EulerOS-SA-2019-2327)

According to the version of the flac package installed, the EulerOS Virtualization for ARM 64 installation on the remote host is affected by the following vulnerability : - An error in the 'readmetadatavorbiscomment' function src/libFLAC/streamdecoder.c in FLAC version 1.3.2 can be exploited to...

flac:fuzzer_encoder: Crash in FLAC__bitwriter_write_raw_uint32_nocheck

Project: https://github.com/xiph/flac.git Detailed Report: https://oss-fuzz.com/testcase?key=5697199728230400 Project: flac Fuzzing Engine: libFuzzer Fuzz Target: fuzzerencoder Job Type: libfuzzerasani386flac Platform Id: linux Crash Type: UNKNOWN WRITE Crash Address: 0xb61fb820 Crash State:...

flac:fuzzer_encoder: Crash in FLAC__bitwriter_free

Detailed Report: https://oss-fuzz.com/testcase?key=5648926757093376 Project: flac Fuzzing Engine: libFuzzer Fuzz Target: fuzzerencoder Job Type: libfuzzerasani386flac Platform Id: linux Crash Type: UNKNOWN WRITE Crash Address: 0x553c57f0 Crash State: FLACbitwriterfree FLACstreamencoderfinish...

flac:fuzzer_decoder: Heap-buffer-overflow in FLAC__bitreader_read_rice_signed_block

Project: https://github.com/xiph/flac.git Detailed Report: https://oss-fuzz.com/testcase?key=5670265022840832 Project: flac Fuzzing Engine: libFuzzer Fuzz Target: fuzzerdecoder Job Type: libfuzzerasanflac Platform Id: linux Crash Type: Heap-buffer-overflow READ 4 Crash Address: 0x625000002100 Cra...

FLAC -- out-of-bounds read

Oss-Fuzz reports: There is a possible out of bounds read due to a heap buffer overflow in FLACbitreaderreadricesignedblock of bitreader.c...

flac:fuzzer_decoder: Use-of-uninitialized-value in FLAC::Decoder::FuzzerStream::write_callback

Project: https://github.com/xiph/flac.git Detailed Report: https://oss-fuzz.com/testcase?key=5735564778668032 Project: flac Fuzzing Engine: libFuzzer Fuzz Target: fuzzerdecoder Job Type: libfuzzermsanflac Platform Id: linux Crash Type: Use-of-uninitialized-value Crash Address: Crash State:...

flac:fuzzer_decoder: Crash in FLAC__crc16_update_words32

Project: https://github.com/xiph/flac.git Detailed Report: https://oss-fuzz.com/testcase?key=5076189185572864 Project: flac Fuzzing Engine: libFuzzer Fuzz Target: fuzzerdecoder Job Type: libfuzzermsanflac Platform Id: linux Crash Type: UNKNOWN READ Crash Address: 0x724000010000 Crash State:...

EulerOS Virtualization 3.0.1.0 : flac (EulerOS-SA-2019-1451)

According to the versions of the flac package installed, the EulerOS Virtualization installation on the remote host is affected by the following vulnerabilities : - A buffer overflow flaw was found in the way flac decoded FLAC audio files. An attacker could create a specially crafted FLAC audio...

Arbitrary Code Executionary

The flac packages contain a decoder and an encoder for the FLAC Free Lossless Audio Codec audio file format. A buffer overflow flaw was found in the way flac decoded FLAC audio files. An attacker could create a specially crafted FLAC audio file that could cause an application using the flac libra...

openSUSE Security Update : flac (openSUSE-2019-1225)

This update for flac fixes the following issues : - CVE-2017-6888: An error in the 'readmetadatavorbiscomment' function could be exploited to cause a memory leak via a specially crafted FLAC file bsc1091045. This update was imported from the SUSE:SLE-15:Update update project. %NASLMINLEVEL 70300 ...