CVE-2024-34953

The taurusxin ncmdump software (version v1.3.2 ) is vulnerable to a Denial of Service (DoS) attack due to uncontrolled resource consumption (CWE-400). An attacker can trigger memory exhaustion by providing a specifically crafted .ncm file . To mitigate this risk, users of version 1.3.2 should avo...

CVE-2024-34952

taurusxin ncmdump v1.3.2 was discovered to contain a segmentation violation via the NeteaseCrypt::FixMetadata function at /src/ncmcrypt.cpp. This vulnerability allows attackers to cause a Denial of Service DoS via a crafted .ncm file...

CVE-2024-34952

taurusxin ncmdump version v1.3.2 is vulnerable to a segmentation violation (NULL pointer dereference) within the NeteaseCrypt::FixMetadata() function located at /src/ncmcrypt.cpp. An attacker can exploit this flaw by providing a crafted .ncm file to trigger a Denial of Service (DoS) . As a tempor...

CVE-2024-34952

taurusxin ncmdump v1.3.2 was discovered to contain a segmentation violation via the NeteaseCrypt::FixMetadata function at /src/ncmcrypt.cpp. This vulnerability allows attackers to cause a Denial of Service DoS via a crafted .ncm file...

PT-2024-26267 · Unknown · Taurusxin Ncmdump

Name of the Vulnerable Software and Affected Versions: taurusxin ncmdump version 1.3.2 Description: The issue is related to a segmentation violation via the NeteaseCrypt::FixMetadata function. This allows attackers to cause a Denial of Service DoS by using a crafted .ncm file. The vulnerability i...

ncmdump 安全漏洞

ncmdump is a software that converts downloaded NetEase Cloud Music cache files ncm to mp3 or flac format by the individual developer TaurusXin in China. A security vulnerability exists in ncmdump version v1.3.2, which originated from allowing an attacker to cause a denial of service via memory...

PT-2024-26268 · Taurusxin · Ncmdump

Name of the Vulnerable Software and Affected Versions: taurusxin ncmdump version 1.3.2 Description: The issue allows attackers to cause a Denial of Service DoS via memory exhaustion by supplying a crafted .ncm file. Recommendations: For version 1.3.2, consider avoiding the use of crafted .ncm fil...

ncmdump 安全漏洞

ncmdump is a program that converts downloaded Netease Cloud Music cache files ncm to mp3 or flac format by the individual developer TaurusXin in China. A security vulnerability exists in ncmdump version v1.3.2, which stems from the NeteaseCrypt FixMetadata function in /src/ncmcrypt.cpp contains a...

CVE-2024-34953: Uncontrolled Resource Consumption

An issue in taurusxin ncmdump v1.3.2 allows attackers to cause a Denial of Service DoS via memory exhaustion by supplying a crafted .ncm file...

CVE-2024-34952: NULL Pointer Dereference

taurusxin ncmdump v1.3.2 was discovered to contain a segmentation violation via the NeteaseCrypt::FixMetadata function at /src/ncmcrypt.cpp. This vulnerability allows attackers to cause a Denial of Service DoS via a crafted .ncm file...