Lucene search
K

9 matches found

OSV
OSV
added 2026/05/27 4:46 p.m.5 views

OPENSUSE-SU-2026:20821-1 Security update for localsearch

This update for localsearch fixes the following issues: - CVE-2026-1764: Fixed a heap buffer overflow leads to denial of service or information disclosure when parsing MP3 files. bsc1257606 - CVE-2026-1765: Fixed a Denial of Service and potential information disclosure via crafted MP3 files...

5.9AI score
Exploits1References8
Tenable Nessus
Tenable Nessus
added 2025/08/27 12:0 a.m.3 views

Linux Distros Unpatched Vulnerability : CVE-2021-40827

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - Clementine Music Player through 1.3.1 when a GLib 2.0.0 DLL is used is vulnerable to a Read Access Violation on Block Data Move, affecting the MP3 file parsing...

7.8CVSS7.7AI score0.00426EPSS
Exploits1References3
CNVD
CNVD
added 2021/12/19 12:0 a.m.14 views

Clementine Denial of Service Vulnerability

Clementine is a multi-platform music player for individual developers running on GNU/Linux, Mac OS X and Windows operating systems. a denial of service vulnerability exists in Clementine Music Player prior to 1.3.1, which stems from a vulnerability to read access conflicts when block data is move...

7.8CVSS5.6AI score0.00426EPSS
Exploits1References1
Debian CVE
Debian CVE
added 2021/12/15 6:37 a.m.19 views

CVE-2021-40827

Clementine Music Player through 1.3.1 when a GLib 2.0.0 DLL is used is vulnerable to a Read Access Violation on Block Data Move, affecting the MP3 file parsing functionality at memcpy+0x265. The vulnerability is triggered when the user opens a crafted MP3 file or loads a remote stream URL that is...

7.8CVSS7.9AI score0.00426EPSS
Exploits1
CNNVD
CNNVD
added 2021/12/15 12:0 a.m.1 views

Clementine 缓冲区错误漏洞

Clementine is a multi-platform music player for individual developers running on GNU/Linux, Mac OS X and Windows operating systems. a denial of service vulnerability exists in Clementine Music Player prior to 1.3.1, which stems from a vulnerability to read access conflicts when block data is move...

7.8CVSS6.4AI score0.00426EPSS
Exploits1References2
Zero Day Initiative
Zero Day Initiative
added 2018/08/30 12:0 a.m.19 views

Adobe Flash MP3 Parsing COMM Out-Of-Bounds Read Information Disclosure Vulnerability

This vulnerability allows remote attackers to disclose sensitive information on vulnerable installations of Adobe Flash. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file. The specific flaw exists within the handling...

4.3CVSS1.6AI score0.02337EPSS
Exploits0References1
securityvulns
securityvulns
added 2009/05/26 12:0 a.m.20 views

COWON America jetCast buffer overflow

Buffer overflow on MP3 parsing...

5.1AI score
Exploits0References1Affected Software1
securityvulns
securityvulns
added 2008/05/14 12:0 a.m.27 views

libid3tag library endless loop

Endless loop on MP3 files parsing...

5CVSS2.8AI score0.07431EPSS
Exploits2References1Affected Software1
Gentoo Linux
Gentoo Linux
added 2008/05/14 12:0 a.m.17 views

libid3tag: Denial of service

Background libid3tag is an ID3 tag manipulation library. Description Kentaro Oda reported an infinite loop in the file field.c when parsing an MP3 file with an ID3FIELDTYPESTRINGLIST field that ends in '\0'. Impact A remote attacker could entice a user to open a specially crafted MP3 file, possib...

5CVSS7.3AI score0.07431EPSS
Exploits2
Rows per page
Query Builder