Lucene search
+L

88 matches found

BDU FSTEC
BDU FSTEC
added 2021/07/22 12:00 a.m.11 views

The vulnerability of the i2ulaw_array function in the libsndfile library, which relates to reading data beyond the allowable buffer limits, allows a attacker to cause a service failure.

The vulnerability of the i2ulawarray function in the libsndfile library is related to reading data beyond the allowable buffer size. Exploiting this vulnerability could allow a malicious actor to cause service failures...

6.5CVSS7.1AI score0.02107EPSS
SaveExploits1References10Affected Software3
BDU FSTEC
BDU FSTEC
added 2021/07/22 12:00 a.m.48 views

The vulnerability of the d2alaw_array() function in the SI libsndfile library, which involves reading beyond the permissible buffer size, allows an attacker to access confidential information or cause service failures.

The vulnerability of the d2alawarray function in the SI libsndfile library relates to reading data beyond the permissible buffer size. Exploiting this vulnerability allows a remote attacker to gain access to confidential information or cause service failures...

8.1CVSS6.9AI score0.02043EPSS
SaveExploits0References9Affected Software3
BDU FSTEC
BDU FSTEC
added 2021/07/22 12:00 a.m.13 views

The vulnerability of the double64_init() function in the libsndfile library, which stems from the lack of checks for division by zero, allows attackers to cause a service failure.

The vulnerability of the double64init function in the libsndfile library is related to the lack of checks for division by zero. Exploiting this vulnerability could allow a remote attacker to cause a service failure...

6.5CVSS6.8AI score0.02076EPSS
SaveExploits0References11Affected Software5
Prion
Prion
added 2021/07/20 3:15 p.m.24 views

Heap overflow

A heap buffer overflow vulnerability in msadpcmdecodeblock of libsndfile 1.0.30 allows attackers to execute arbitrary code via a crafted WAV file...

6.8CVSS8.8AI score0.03292EPSS
SaveExploits1References6Affected Software3
Microsoft CVE
Microsoft CVE
added 2021/01/28 12:00 a.m.9 views

In libsndfile version 1.0.28 an error in the "aiff_read_chanmap()" function (aiff.c) can be exploited to cause an out-of-bounds read memory access via a specially crafted AIFF file.

...

8.8CVSS7AI score0.02485EPSS
SaveExploits1
Veracode
Veracode
added 2020/05/10 11:27 p.m.36 views

Denial Of Service (DoS)

libsndfile is vulnerable to denial of service DoS. The vulnerability exists as the flacbuffercopy function in flac.c in libsndfile 1.0.28 allows remote attackers to cause a denial of service invalid read and application crash via a crafted audio file...

6.5CVSS5.3AI score0.03423EPSS
SaveExploits0References3Affected Software1
OSV
OSV
added 2019/10/23 9:06 p.m.9 views

MGASA-2019-0300 Updated libsndfile packages fix security vulnerability

Updated libsndfile package fixes security vulnerability: It was discovered that libsndfile incorrectly handled certain malformed files. A remote attacker could use this issue to cause libsndfile to crash, resulting in a denial of service, or possibly execute arbitrary code CVE-2019-3832...

5.5CVSS7.1AI score0.0051EPSS
SaveExploits1References3
OSV
OSV
added 2019/03/21 4:01 p.m.10 views

DEBIAN-CVE-2019-3832

It was discovered the fix for CVE-2018-19758 libsndfile was not complete and still allows a read beyond the limits of a buffer in wavwriteheader function in wav.c. A local attacker may use this flaw to make the application crash...

5.5CVSS6.8AI score0.0051EPSS
SaveExploits1References1
CNVD
CNVD
added 2019/03/15 12:00 a.m.10 views

libsndfile out-of-bounds read vulnerability (CNVD-2019-07249)

libsndfile is an AC library for reading and writing sound files containing sampled audio data. An out-of-bounds read vulnerability exists in the 'wavwriteheader' function of the wav.c file in libsndfile, which can be exploited by an attacker to cause a denial of service or obtain sensitive...

5.5CVSS8.4AI score0.0051EPSS
SaveExploits1References1
Veracode
Veracode
added 2018/11/30 5:24 a.m.30 views

Denial Of Service (DoS)

libsndfile.so is vulnerable to denial of service. A buffer over-read in the function i2ulawarray in ulaw.c allows a remote attacker to cause a denial of service condition...

6.5CVSS6.3AI score0.02107EPSS
SaveExploits1References4Affected Software2
CNVD
CNVD
added 2018/11/30 12:00 a.m.17 views

libsndfile buffer out-of-bounds read vulnerability (CNVD-2019-00814)

libsndfile is a C library developed by software developer Erik de Castro Lopo that reads and writes audio files in AIFF, AU, and WAV formats through standard interfaces. A heap buffer out-of-bounds read vulnerability exists in the wav.c file in libsndfile version 1.0.28, which can be exploited to...

6.5CVSS6.1AI score0.01689EPSS
SaveExploits1References1
OSV
OSV
added 2018/11/29 8:29 a.m.7 views

DEBIAN-CVE-2018-19661

An issue was discovered in libsndfile 1.0.28. There is a buffer over-read in the function i2ulawarray in ulaw.c that will lead to a denial of service...

6.5CVSS7.1AI score0.02107EPSS
SaveExploits1References1
Veracode
Veracode
added 2018/08/07 5:40 a.m.38 views

Heap-based Buffer Overflow

libsndfile is vulnerable to heap-based buffer overflow. This is due to the wrong management of the headindex and headend values while parsing AIFF header values. An attacker is able to exploit this vulnerability to overwrite memory heap by manipulating index values to use memcpy via a malicious...

9.3CVSS6.5AI score0.13294EPSS
SaveExploits2References14Affected Software1
OSV
OSV
added 2018/07/07 5:29 p.m.12 views

CVE-2018-13419

An issue has been found in libsndfile 1.0.28. There is a memory leak in psfallocate in common.c, as demonstrated by sndfile-convert. NOTE: The maintainer and third parties were unable to reproduce and closed the issue...

6.5CVSS6.6AI score
SaveExploits0References1
BDU FSTEC
BDU FSTEC
added 2018/01/12 12:00 a.m.76 views

The vulnerability of the aiff_read_chanmap function in the libsndfile library, which allows an attacker to compromise confidentiality, integrity, and accessibility of data.

The vulnerability of the aiffreadchanmap function in the aaiff.c file of the libsndfile library relates to accessing beyond the buffer memory boundaries. Exploiting this vulnerability could allow an attacker, operating remotely, to compromise the confidentiality, integrity, and accessibility of...

8.8CVSS7.8AI score0.02485EPSS
SaveExploits1References8Affected Software3
NVD
NVD
added 2017/09/21 1:29 p.m.22 views

CVE-2017-14246

An out of bounds read in the function d2ulawarray in ulaw.c of libsndfile 1.0.28 may lead to a remote DoS attack or information disclosure, related to mishandling of the NAN and INFINITY floating-point values...

8.1CVSS6.4AI score0.02229EPSS
SaveExploits0References5
Debian CVE
Debian CVE
added 2017/09/21 1:00 p.m.51 views

CVE-2017-14246

An out of bounds read in the function d2ulawarray in ulaw.c of libsndfile 1.0.28 may lead to a remote DoS attack or information disclosure, related to mishandling of the NAN and INFINITY floating-point values...

8.1CVSS8.1AI score0.02229EPSS
SaveExploits0
CNVD
CNVD
added 2017/05/03 12:00 a.m.11 views

libsndfile Buffer Overflow Vulnerability

libsndfile is a C library developed by software developer Erik de Castro Lopo that reads and writes audio files in AIFF, AU, and WAV formats through standard interfaces. A buffer overflow vulnerability exists in the flacbuffercopy function of the flac.c file in libsndfile version 1.0.28. A remote...

8.8CVSS7.2AI score0.03902EPSS
SaveExploits0References1
OSV
OSV
added 2017/04/30 7:59 p.m.10 views

ALPINE-CVE-2017-8363

The flacbuffercopy function in flac.c in libsndfile 1.0.28 allows remote attackers to cause a denial of service heap-based buffer over-read and application crash via a crafted audio file...

6.5CVSS6.8AI score0.03347EPSS
SaveExploits0References1
OSV
OSV
added 2017/04/30 7:59 p.m.8 views

ALPINE-CVE-2017-8361

The flacbuffercopy function in flac.c in libsndfile 1.0.28 allows remote attackers to cause a denial of service buffer overflow and application crash or possibly have unspecified other impact via a crafted audio file...

8.8CVSS7.7AI score0.03902EPSS
SaveExploits0References1
Rows per page
Query Builder