Lucene search
+L

1497 matches found

OSV
OSV
added 2025/01/24 2:15 p.m.32 views

UBUNTU-CVE-2024-57184

An issue was discovered in GPAC v0.8.0, as demonstrated by MP4Box. It contains a heap-based buffer overflow in gfm2tsprocesspmt in mediatools/mpegts.c:2163 that can cause a denial of service DOS via a crafted MP4 file...

5.5CVSS6.1AI score0.00342EPSS
SaveExploits1References3
Positive Technologies
Positive Technologies
added 2025/01/16 12:0 a.m.10 views

PT-2025-3302 · Unknown +2 · Matrix Media Repo +4

Name of the Vulnerable Software and Affected Versions: Matrix Media Repo versions prior to 1.3.8 Description: The issue arises when SVG or JPEGXL thumbnailers are enabled, allowing a user to upload a file that claims to be one of these types and request a thumbnail, potentially invoking a differe...

8.9CVSS7.7AI score0.01058EPSS
SaveExploits2References90
RedHat Linux
RedHat Linux
added 2024/12/18 9:41 a.m.4 views

gstreamer1-plugins-good: integer overflows in MP4/MOV demuxer and memory allocator that can lead to out-of-bounds writes

A flaw was found in the MP4/MOV demuxer and memory allocator in the GStreamer library. Processing a specially crafted input file can cause an integer overflow in the qtdemuxparsetheoraextension function. This issue leads to a small amount of memory being allocated to store a large input size,...

9.8CVSS7.3AI score0.01355EPSS
SaveExploits0References7
RedHat Linux
RedHat Linux
added 2024/12/18 9:41 a.m.17 views

gstreamer1-plugins-good: OOB-write in isomp4/qtdemux.c

A flaw was found in the GStreamer library. An integer overflow in the MP4/MOV demuxer's sample table parser can lead to out-of-bounds writes and NULL-pointer dereferences for certain input files. This vulnerability allows a malicious third party to trigger an application crash and, in the case of...

9.8CVSS6.2AI score0.00956EPSS
SaveExploits0References7
RedHat Linux
RedHat Linux
added 2024/12/18 8:24 a.m.5 views

gstreamer1-plugins-good: OOB-write in isomp4/qtdemux.c

A flaw was found in the GStreamer library. An integer overflow in the MP4/MOV demuxer's sample table parser can lead to out-of-bounds writes and NULL-pointer dereferences for certain input files. This vulnerability allows a malicious third party to trigger an application crash and, in the case of...

9.8CVSS6.2AI score0.00956EPSS
SaveExploits0References7
AlmaLinux
AlmaLinux
added 2024/12/17 12:0 a.m.13 views

Moderate: mpg123:1.32.9 security update

The mpg123 packages contain real time MPEG 1.0/2.0/2.5 audio player/decoder for layers 1, 2, and 3 most commonly MPEG 1.0 layer 3 also known as MP3, as well as re-usable decoding and output libraries. Security Fixes: mpg123: Buffer overflow when writing decoded PCM samples CVE-2024-10573 For more...

6.7CVSS7.1AI score0.00349EPSS
SaveExploits0References4
RedHat Linux
RedHat Linux
added 2024/12/16 4:14 p.m.8 views

gstreamer1-plugins-good: integer overflows in MP4/MOV demuxer and memory allocator that can lead to out-of-bounds writes

A flaw was found in the MP4/MOV demuxer and memory allocator in the GStreamer library. Processing a specially crafted input file can cause an integer overflow in the qtdemuxparsetheoraextension function. This issue leads to a small amount of memory being allocated to store a large input size,...

9.8CVSS7.3AI score0.01355EPSS
SaveExploits0References7
OSV
OSV
added 2024/11/12 7:53 p.m.14 views

MGASA-2024-0358 Updated mpg123 packages fix security vulnerability

An out-of-bounds write flaw was found in mpg123 when handling crafted streams. When decoding PCM, the libmpg123 may write past the end of a heap-located buffer. Consequently, heap corruption may happen, and arbitrary code execution may not be dismissed. The complexity required to exploit this fla...

6.7CVSS7AI score0.00349EPSS
SaveExploits0References6
Mageia
Mageia
added 2024/11/12 7:53 p.m.19 views

Updated mpg123 packages fix security vulnerability

An out-of-bounds write flaw was found in mpg123 when handling crafted streams. When decoding PCM, the libmpg123 may write past the end of a heap-located buffer. Consequently, heap corruption may happen, and arbitrary code execution may not be dismissed. The complexity required to exploit this fla...

6.7CVSS8AI score0.00349EPSS
SaveExploits0References5
NVD
NVD
added 2024/10/31 7:15 p.m.15 views

CVE-2024-10573

An out-of-bounds write flaw was found in mpg123 when handling crafted streams. When decoding PCM, the libmpg123 may write past the end of a heap-located buffer. Consequently, heap corruption may happen, and arbitrary code execution is not discarded. The complexity required to exploit this flaw is...

6.7CVSS0.00349EPSS
SaveExploits0References9
OSV
OSV
added 2024/10/31 7:15 p.m.15 views

CVE-2024-10573

An out-of-bounds write flaw was found in mpg123 when handling crafted streams. When decoding PCM, the libmpg123 may write past the end of a heap-located buffer. Consequently, heap corruption may happen, and arbitrary code execution is not discarded. The complexity required to exploit this flaw is...

7.9AI score
SaveExploits0References9
Vulnrichment
Vulnrichment
added 2024/10/31 6:31 p.m.19 views

CVE-2024-10573 Mpg123: buffer overflow when writing decoded pcm samples

An out-of-bounds write flaw was found in mpg123 when handling crafted streams. When decoding PCM, the libmpg123 may write past the end of a heap-located buffer. Consequently, heap corruption may happen, and arbitrary code execution is not discarded. The complexity required to exploit this flaw is...

6.7CVSS8AI score0.00349EPSS
SaveExploits0References5
Cvelist
Cvelist
added 2024/10/31 6:31 p.m.23 views

CVE-2024-10573 Mpg123: buffer overflow when writing decoded pcm samples

An out-of-bounds write flaw was found in mpg123 when handling crafted streams. When decoding PCM, the libmpg123 may write past the end of a heap-located buffer. Consequently, heap corruption may happen, and arbitrary code execution is not discarded. The complexity required to exploit this flaw is...

6.7CVSS0.00349EPSS
SaveExploits0References5
RedhatCVE
RedhatCVE
added 2024/10/31 5:26 p.m.13 views

CVE-2024-10573

An out-of-bounds write flaw was found in mpg123 when handling crafted streams. When decoding PCM, the libmpg123 may write past the end of a heap-located buffer. Consequently, heap corruption may happen, and arbitrary code execution is not discarded. The complexity required to exploit this flaw is...

6.7CVSS8AI score0.00349EPSS
SaveExploits0References4
SUSE CVE
SUSE CVE
added 2024/10/29 4:15 a.m.6 views

SUSE CVE-2024-50613

libsndfile through 1.2.2 has a reachable assertion, that may lead to application exit, in mpegl3encode.c mpegl3encoderclose...

6.5CVSS7AI score0.00509EPSS
SaveExploits1References3
RedhatCVE
RedhatCVE
added 2024/10/28 10:56 p.m.13 views

CVE-2024-50613

libsndfile through 1.2.2 has a reachable assertion, that may lead to application exit, in mpegl3encode.c mpegl3encoderclose...

6.5CVSS6.8AI score0.00509EPSS
SaveExploits1References4
OSV
OSV
added 2024/10/27 10:15 p.m.13 views

AZL-51909 CVE-2024-50613 affecting package libsndfile 1.2.2-4

libsndfile through 1.2.2 has a reachable assertion, that may lead to application exit, in mpegl3encode.c mpegl3encoderclose...

6.5CVSS6.6AI score0.00509EPSS
SaveExploits1References1
OSV
OSV
added 2024/10/27 10:15 p.m.4 views

DEBIAN-CVE-2024-50613

libsndfile through 1.2.2 has a reachable assertion, that may lead to application exit, in mpegl3encode.c mpegl3encoderclose...

6.5CVSS6.4AI score0.00509EPSS
SaveExploits1References1
OSV
OSV
added 2024/10/27 10:15 p.m.10 views

UBUNTU-CVE-2024-50613

libsndfile through 1.2.2 has a reachable assertion, that may lead to application exit, in mpegl3encode.c mpegl3encoderclose...

6.5CVSS5.8AI score0.00509EPSS
SaveExploits1References2
CNNVD
CNNVD
added 2024/10/27 12:0 a.m.9 views

libsndfile 安全漏洞

libsndfile is a libsndfile open source AC library for reading and writing sound files containing sampled audio data. A security vulnerability exists in libsndfile version 1.2.2 and earlier, which stems from the presence of a reachable assertion in the mpegl3encoderclose function in mpegl3encode.c...

6.5CVSS6.4AI score0.00509EPSS
SaveExploits1References2
Rows per page
Query Builder