CVE-2017-12839

A heap-based buffer over-read in the getbits function in src/libmpg123/getbits.h in mpg123 through 1.25.5 allows remote attackers to cause a possible denial-of-service out-of-bounds read or possibly have unspecified other impact via a crafted mp3 file...

Heap overflow

A heap-based buffer over-read in the getbits function in src/libmpg123/getbits.h in mpg123 through 1.25.5 allows remote attackers to cause a possible denial-of-service out-of-bounds read or possibly have unspecified other impact via a crafted mp3 file...

UBUNTU-CVE-2017-12839

A heap-based buffer over-read in the getbits function in src/libmpg123/getbits.h in mpg123 through 1.25.5 allows remote attackers to cause a possible denial-of-service out-of-bounds read or possibly have unspecified other impact via a crafted mp3 file...

DEBIAN-CVE-2017-12839

A heap-based buffer over-read in the getbits function in src/libmpg123/getbits.h in mpg123 through 1.25.5 allows remote attackers to cause a possible denial-of-service out-of-bounds read or possibly have unspecified other impact via a crafted mp3 file...

CVE-2017-12839

CVE-2017-12839 describes a heap-based buffer over-read in the getbits function of mpg123 (src/libmpg123/getbits.h) up to version 1.25.5. An attacker can craft an MP3 file to trigger a denial-of-service via out-of-bounds read, with potential unspecified other impact. Documents consistently list th...

CVE-2017-12839

A heap-based buffer over-read in the getbits function in src/libmpg123/getbits.h in mpg123 through 1.25.5 allows remote attackers to cause a possible denial-of-service out-of-bounds read or possibly have unspecified other impact via a crafted mp3 file...

Code injection

The getbits function in mpglibDBL/common.c in mp3gain through 1.5.2-r2 allows remote attackers to cause a denial of service segmentation fault and application crash or possibly have unspecified other impact...

CVE-2018-10776

The getbits function in mpglibDBL/common.c in mp3gain through 1.5.2-r2 allows remote attackers to cause a denial of service segmentation fault and application crash or possibly have unspecified other impact...

DEBIAN-CVE-2018-10776

The getbits function in mpglibDBL/common.c in mp3gain through 1.5.2-r2 allows remote attackers to cause a denial of service segmentation fault and application crash or possibly have unspecified other impact...

CVE-2018-10776

The getbits function in mpglibDBL/common.c in mp3gain through 1.5.2-r2 allows remote attackers to cause a denial of service segmentation fault and application crash or possibly have unspecified other impact...

CVE-2018-10776

The getbits function in mpglibDBL/common.c in mp3gain through 1.5.2-r2 allows remote attackers to cause a denial of service segmentation fault and application crash or possibly have unspecified other impact...

CVE-2018-10776

The getbits function in mpglibDBL/common.c in mp3gain through 1.5.2-r2 allows remote attackers to cause a denial of service segmentation fault and application crash or possibly have unspecified other impact...

CVE-2018-10776

The vulnerability CVE-2018-10776 affects mp3gain (mpglibDBL/common.c, getbits) up to version 1.5.2-r2. The getbits function is exposed to remote inputs and can cause a denial of service via segmentation fault and application crash, with possible unspecified additional impact. Documents identify t...

Updated OpenEXR packages fix security vulnerability

In OpenEXR 2.2.0, an invalid read of size 2 in the hufDecode function in ImfHuf.cpp could cause the application to crash CVE-2017-9110. In OpenEXR 2.2.0, an invalid read of size 1 in the getBits function in ImfHuf.cpp could cause the application to crash CVE-2017-9112. In OpenEXR 2.2.0, an invali...

unrar/unrar_fuzzer: Heap-buffer-overflow in BitInput::getbits

Project: https://github.com/aawc/unrar.git Detailed report: https://oss-fuzz.com/testcase?key=5650341182832640 Project: unrar Fuzzer: libFuzzerunrarfuzzer Fuzz target binary: unrarfuzzer Job Type: libfuzzerasanunrar Platform Id: linux Crash Type: Heap-buffer-overflow READ 1 Crash Address:...

UBUNTU-CVE-2017-1000174

In SWFTools, an address access exception was found in swfdump swfGetBits...

SWFTools Address Access Exception Vulnerability

SWFTools is a suite of open source software tools for creating and manipulating SWF files. An address access exception vulnerability exists in swfdump swfGetBits in SWFTools. An attacker could exploit this vulnerability to cause a denial of service...

CVE-2017-9112

In OpenEXR 2.2.0, an invalid read of size 1 in the getBits function in ImfHuf.cpp could cause the application to crash...

LIM OpenEXR Denial of Service Vulnerability (CNVD-2017-07514)

LIM OpenEXR is an image file format developed by Industrial Light and Magic LIM in the United States for high dynamic range HDR images. A denial of service vulnerability exists in the 'getBits' function of the ImfHuf.cpp file in LIM OpenEXR version 2.2.0. An attacker can exploit this vulnerabilit...

DEBIAN-CVE-2017-9112

In OpenEXR 2.2.0, an invalid read of size 1 in the getBits function in ImfHuf.cpp could cause the application to crash...