CVE-2024-34952

CVE-2024-34952 affects taurusxin ncmdump v1.3.2. A segmentation violation in NeteaseCrypt::FixMetadata() implemented in /src/ncmcrypt.cpp allows a crafted .ncm file to trigger a Denial of Service. Sources consistently describe the issue and affected component, with remediation guidance appearing ...

CVE-2024-34952

taurusxin ncmdump v1.3.2 was discovered to contain a segmentation violation via the NeteaseCrypt::FixMetadata function at /src/ncmcrypt.cpp. This vulnerability allows attackers to cause a Denial of Service DoS via a crafted .ncm file...

PT-2024-26268 · Taurusxin · Ncmdump

Name of the Vulnerable Software and Affected Versions: taurusxin ncmdump version 1.3.2 Description: The issue allows attackers to cause a Denial of Service DoS via memory exhaustion by supplying a crafted .ncm file. Recommendations: For version 1.3.2, consider avoiding the use of crafted .ncm fil...

ncmdump 安全漏洞

ncmdump is a program that converts downloaded Netease Cloud Music cache files ncm to mp3 or flac format by the individual developer TaurusXin in China. A security vulnerability exists in ncmdump version v1.3.2, which stems from the NeteaseCrypt FixMetadata function in /src/ncmcrypt.cpp contains a...

ncmdump 安全漏洞

ncmdump is a software that converts downloaded NetEase Cloud Music cache files ncm to mp3 or flac format by the individual developer TaurusXin in China. A security vulnerability exists in ncmdump version v1.3.2, which originated from allowing an attacker to cause a denial of service via memory...

PT-2024-26267 · Unknown · Taurusxin Ncmdump

Name of the Vulnerable Software and Affected Versions: taurusxin ncmdump version 1.3.2 Description: The issue is related to a segmentation violation via the NeteaseCrypt::FixMetadata function. This allows attackers to cause a Denial of Service DoS by using a crafted .ncm file. The vulnerability i...