[SECURITY] Fedora 43 Update: mac-12.63-1.fc43

Monkey's Audio is a fast and easy way to compress digital music. Unlike traditional methods such as mp3, ogg, or lqt that permanently discard quality to save space, Monkey's Audio only makes perfect, bit-for-bit copies of your music. That means it always sounds perfect =E2=80=93 exactly t he same...

CVE-2025-61043

A flaw was found in Monkey Audio. An improper handling of the length of UTF-8 strings in the CAPECharacterHelper::GetUTF16FromUTF8 function can cause an out-of-bounds read. This vulnerability can be exploited to expose sensitive information or potentially cause a crash, resulting in a denial of...

CVE-2025-61043

A flaw in Monkey's Audio version 11.31 allows for an out-of-bounds read due to improper handling of the length of input UTF-8 strings in the CAPECharacterHelper::GetUTF16FromUTF8 function. This vulnerability could allow an attacker to expose sensitive information or cause a crash , leading to a d...

CVE-2025-61043: Out-of-bounds Read

An out-of-bounds read vulnerability has been discovered in Monkey's Audio 11.31, specifically in the CAPECharacterHelper::GetUTF16FromUTF8 function. The issue arises from improper handling of the length of the input UTF-8 string, causing the function to read past the memory boundary. This...

PT-2025-44178

Name of the Vulnerable Software and Affected Versions Monkey's Audio version 11.31 Description An out-of-bounds read issue exists in Monkey's Audio version 11.31, specifically within the CAPECharacterHelper::GetUTF16FromUTF8 function. This occurs due to improper handling of the length of input...

EUVD-2006-7222

Malware in sbrugna...

CVE-2006-7245

Monkey's Audio before 4.01b2 allows remote attackers to cause a denial of service application crash via an APX file that lacks NULL termination...

CVE-2009-5075

Monkey's Audio before 4.02 allows remote attackers to cause a denial of service application crash via a malformed APE file...

Google Project Zero Researcher Uncovers Zero-Click Exploit Targeting Samsung Devices

Cybersecurity researchers have detailed a now-patched security flaw impacting Monkey's Audio APE decoder on Samsung smartphones that could lead to code execution. The high-severity vulnerability, tracked as CVE-2024-49415 CVSS score: 8.1, affects Samsung devices running Android versions 12, 13, a...

Fedora: Security Advisory for qmmp-plugin-pack (FEDORA-2023-a5e10b188a)

The remote host is missing an update for the Copyright C 2023 Greenbone Networks GmbH Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-or-later This program is free software; you can...

CVE-2006-7245

Monkey's Audio before 4.01b2 allows remote attackers to cause a denial of service application crash via an APX file that lacks NULL termination...

CVE-2009-5075

Monkey's Audio before 4.02 allows remote attackers to cause a denial of service application crash via a malformed APE file...

Design/Logic Flaw

Monkey's Audio before 4.02 allows remote attackers to cause a denial of service application crash via a malformed APE file...

CVE-2009-5075

Monkey's Audio before 4.02 allows remote attackers to cause a denial of service application crash via a malformed APE file...

CVE-2006-7245

Monkey's Audio before 4.01b2 allows remote attackers to cause a denial of service application crash via an APX file that lacks NULL termination...

CVE-2006-7245

Vulnerability: Monkey’s Audio before 4.01b2 is affected. A crafted APX file that lacks NULL termination can cause the application to crash (Denial of Service). Affected component: Monkey’s Audio parser/handling of APX files; root cause is missing NULL termination in APX processing. Impact is DoS ...

CVE-2009-5075

CVE-2009-5075 affects Monkey’s Audio before 4.02. The vulnerability allows remote attackers to cause a denial of service (application crash) by feeding a malformed APE file. Affected: Monkey’s Audio versions 4.0.1 beta 2 and earlier. Root cause described as processing malformed APE data leading t...

CVE-2006-7245: Undefined Security Weakness

Monkey's Audio before 4.01b2 allows remote attackers to cause a denial of service application crash via an APX file that lacks NULL termination...

PT-2011-1329

Name of the Vulnerable Software and Affected Versions Monkey's Audio versions prior to 4.02 Description The issue allows remote attackers to cause a denial of service, resulting in an application crash, by providing a malformed APE file. Recommendations For versions prior to 4.02, update to versi...

PT-2011-1261

Name of the Vulnerable Software and Affected Versions Monkey's Audio versions prior to 4.01b2 Description The issue allows remote attackers to cause a denial of service, resulting in an application crash. This can be achieved by providing an APX file that lacks NULL termination. Recommendations F...