[SECURITY] Fedora 43 Update: mac-12.63-1.fc43

Monkey's Audio is a fast and easy way to compress digital music. Unlike traditional methods such as mp3, ogg, or lqt that permanently discard quality to save space, Monkey's Audio only makes perfect, bit-for-bit copies of your music. That means it always sounds perfect =E2=80=93 exactly t he same...

CVE-2025-61043

A flaw was found in Monkey Audio. An improper handling of the length of UTF-8 strings in the CAPECharacterHelper::GetUTF16FromUTF8 function can cause an out-of-bounds read. This vulnerability can be exploited to expose sensitive information or potentially cause a crash, resulting in a denial of...

PT-2025-44178

Name of the Vulnerable Software and Affected Versions Monkey's Audio version 11.31 Description An out-of-bounds read issue exists in Monkey's Audio version 11.31, specifically within the CAPECharacterHelper::GetUTF16FromUTF8 function. This occurs due to improper handling of the length of input...

CVE-2025-61043

A flaw in Monkey's Audio version 11.31 allows for an out-of-bounds read due to improper handling of the length of input UTF-8 strings in the CAPECharacterHelper::GetUTF16FromUTF8 function. This vulnerability could allow an attacker to expose sensitive information or cause a crash , leading to a d...

CVE-2025-61043: Out-of-bounds Read

An out-of-bounds read vulnerability has been discovered in Monkey's Audio 11.31, specifically in the CAPECharacterHelper::GetUTF16FromUTF8 function. The issue arises from improper handling of the length of the input UTF-8 string, causing the function to read past the memory boundary. This...

EUVD-2006-7222

Malware in sbrugna...

CVE-2006-7245

Monkey's Audio before 4.01b2 allows remote attackers to cause a denial of service application crash via an APX file that lacks NULL termination...

CVE-2009-5075

Monkey's Audio before 4.02 allows remote attackers to cause a denial of service application crash via a malformed APE file...

Google Project Zero Researcher Uncovers Zero-Click Exploit Targeting Samsung Devices

Cybersecurity researchers have detailed a now-patched security flaw impacting Monkey's Audio APE decoder on Samsung smartphones that could lead to code execution. The high-severity vulnerability, tracked as CVE-2024-49415 CVSS score: 8.1, affects Samsung devices running Android versions 12, 13, a...

Fedora: Security Advisory for qmmp-plugin-pack (FEDORA-2023-a5e10b188a)

The remote host is missing an update for the Copyright C 2023 Greenbone Networks GmbH Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-or-later This program is free software; you can...

CVE-2009-5075

Monkey's Audio before 4.02 allows remote attackers to cause a denial of service application crash via a malformed APE file...

CVE-2006-7245

Monkey's Audio before 4.01b2 allows remote attackers to cause a denial of service application crash via an APX file that lacks NULL termination...

Design/Logic Flaw

Monkey's Audio before 4.02 allows remote attackers to cause a denial of service application crash via a malformed APE file...

CVE-2006-7245

Vulnerability: Monkey’s Audio before 4.01b2 is affected. A crafted APX file that lacks NULL termination can cause the application to crash (Denial of Service). Affected component: Monkey’s Audio parser/handling of APX files; root cause is missing NULL termination in APX processing. Impact is DoS ...

CVE-2009-5075

Monkey's Audio before 4.02 allows remote attackers to cause a denial of service application crash via a malformed APE file...

CVE-2009-5075

CVE-2009-5075 affects Monkey’s Audio before 4.02. The vulnerability allows remote attackers to cause a denial of service (application crash) by feeding a malformed APE file. Affected: Monkey’s Audio versions 4.0.1 beta 2 and earlier. Root cause described as processing malformed APE data leading t...

CVE-2006-7245

Monkey's Audio before 4.01b2 allows remote attackers to cause a denial of service application crash via an APX file that lacks NULL termination...

CVE-2006-7245: Undefined Security Weakness

Monkey's Audio before 4.01b2 allows remote attackers to cause a denial of service application crash via an APX file that lacks NULL termination...

CVE-2009-5075: Undefined Security Weakness

Monkey's Audio before 4.02 allows remote attackers to cause a denial of service application crash via a malformed APE file...

KLA10432 DoS vulnerability in Monkey's Audio

An unspecified vulnerability was found in Monkey’s Audio. By exploiting this vulnerability malicious users can cause denial of service. This vulnerability can be exploited remotely via a specially designed APE file. Original advisories - Exploitation Related products Monkey's-Audio CVE list...