SELA Buffer Error Vulnerability

SELA aka SimplE Lossless Audio is a lossless audio encoder/decoder. A stack buffer overflow vulnerability exists in the 'initapev2keys' function in the core/apev2.c file in SELA version 0.1.2-alpha. A detailed vulnerability description is not available at this time...

CVE-2018-11626

SELA (aka SimplE Lossless Audio) v0.1.2-alpha is affected by a stack-based buffer overflow in the core/apev2.c init_apev2_keys function. This CVE entry identifies the vulnerable component and the root cause but does not provide any public details on affected platforms, versions beyond v0.1.2-alph...

CVE-2018-11626

SELA aka SimplE Lossless Audio v0.1.2-alpha has a stack-based buffer overflow in the core/apev2.c initapev2keys function...

Double free

An issue was discovered in Free Lossless Image Format FLIF 0.3. An attacker can trigger a long loop in imageloadpnm in image/image-pnm.cpp...

CVE-2018-11507

An issue was discovered in Free Lossless Image Format FLIF 0.3. An attacker can trigger a long loop in imageloadpnm in image/image-pnm.cpp...

Free Lossless Image Format (FLIF) Long Loop Vulnerability

FLIF is a lossless image format based on MANIAC compression. A long loop vulnerability exists in imageloadpnm in image/image-pnm.cpp in Free Lossless Image Format FLIF version 0.3. An attacker can exploit this vulnerability to cause resource exhaustion...

[SECURITY] Fedora 27 Update: wavpack-5.1.0-8.fc27

WavPack is a completely open audio compression format providing lossless, high-quality lossy, and a unique hybrid compression mode. Although the technology is loosely based on previous versions of WavPack, the new version 4 format has been designed from the ground up to offer unparalleled...

[SECURITY] Fedora 28 Update: wavpack-5.1.0-8.fc28

WavPack is a completely open audio compression format providing lossless, high-quality lossy, and a unique hybrid compression mode. Although the technology is loosely based on previous versions of WavPack, the new version 4 format has been designed from the ground up to offer unparalleled...

[SECURITY] Fedora 27 Update: flac-1.3.2-7.fc27

FLAC stands for Free Lossless Audio Codec. Grossly oversimplified, FLAC is similar to Ogg Vorbis, but lossless. The FLAC project consists of the stream format, reference encoders and decoders in library form, flac, a command-line program to encode and decode FLAC files, metaflac, a command-line...

Free Lossless Image Format Denial of Service Vulnerability (CNVD-2018-09372)

Free Lossless Image Format FLIF is a lossless image format based on MANIAC compression. A security vulnerability exists in the 'Plane' function of the image/image.hpp file in FLIF version 0.3. A remote attacker can exploit this vulnerability with a specially crafted file to cause a denial of...

Free Lossless Image Format Denial of Service Vulnerability

Free Lossless Image Format FLIF is a lossless image format based on MANIAC compression. A security vulnerability exists in the 'TransformPaletteC::process' function in the transform/paletteC.hpp file in FLIF version 0.3. A remote attacker can exploit this vulnerability to cause a denial of servic...

CVE-2018-10971

An issue was discovered in Free Lossless Image Format FLIF 0.3. The Plane function in image/image.hpp allows remote attackers to cause a denial of service attempted excessive memory allocation via a crafted file...

CVE-2018-10972

An issue was discovered in Free Lossless Image Format FLIF 0.3. The TransformPaletteC::process function in transform/paletteC.hpp allows remote attackers to cause a denial of service heap-based buffer overflow or possibly have unspecified other impact via a crafted file...

CVE-2018-10972

An issue was discovered in Free Lossless Image Format FLIF 0.3. The TransformPaletteC::process function in transform/paletteC.hpp allows remote attackers to cause a denial of service heap-based buffer overflow or possibly have unspecified other impact via a crafted file...

CVE-2018-10971

CVE-2018-10971 affects Free Lossless Image Format (FLIF) 0.3. The Plane function in image/image.hpp is vulnerable to crafted FLIF files that trigger a denial of service via attempted excessive memory allocation. Documented impact indicates availability impact (PARTIAL to HIGH in CVSS), with local...

CVE-2018-10972

The CVE-2018-10972 entry concerns Free Lossless Image Format (FLIF) 0.3. The vulnerability lies in the TransformPaletteC::process function (transform/palette_C.hpp), which can be triggered by a crafted file to cause a heap-based buffer overflow and denial of service. The available connected docum...

[SECURITY] Fedora 28 Update: flac-1.3.2-7.fc28

FLAC stands for Free Lossless Audio Codec. Grossly oversimplified, FLAC is similar to Ogg Vorbis, but lossless. The FLAC project consists of the stream format, reference encoders and decoders in library form, flac, a command-line program to encode and decode FLAC files, metaflac, a command-line...

DEBIAN-CVE-2017-6888

An error in the "readmetadatavorbiscomment" function src/libFLAC/streamdecoder.c in FLAC version 1.3.2 can be exploited to cause a memory leak via a specially crafted FLAC file...

[SECURITY] Fedora 26 Update: wavpack-5.1.0-7.fc26

WavPack is a completely open audio compression format providing lossless, high-quality lossy, and a unique hybrid compression mode. Although the technology is loosely based on previous versions of WavPack, the new version 4 format has been designed from the ground up to offer unparalleled...

[SECURITY] Fedora 27 Update: mingw-wavpack-5.1.0-4.fc27

WavPack is a completely open audio compression format providing lossless, high-quality lossy, and a unique hybrid compression mode. Although the technology is loosely based on previous versions of WavPack, the new version 4 format has been designed from the ground up to offer unparalleled...