gstreamer-plugins-good: integer overflow leading to heap overwrite in FLAC image tag handling

A heap-based buffer overflow vulnerability was found in the FLAC parser in GStreamer. This issue occurs when processing malformed image tags, which could allow a malicious third party to induce a crash in the application and potentially execute code by manipulating the heap...

SUSE CVE-2017-8361

The flacbuffercopy function in flac.c in libsndfile 1.0.28 allows remote attackers to cause a denial of service buffer overflow and application crash or possibly have unspecified other impact via a crafted audio file...

SUSE CVE-2017-9300

plugins\codec\libflacplugin.dll in VideoLAN VLC media player 2.2.4 allows remote attackers to cause a denial of service heap corruption and application crash or possibly have unspecified other impact via a crafted FLAC file...

CVE-2014-2097

The takdecodeframe function in libavcodec/takdec.c in FFmpeg before 2.1.4 does not properly validate a certain bits-per-sample value, which allows remote attackers to cause a denial of service out-of-bounds array access or possibly have unspecified other impact via crafted TAK aka Tom's lossless...