Lucene search
+L

372 matches found

OSV
OSV
•added 2024/12/12 2:03 a.m.•16 views

AZL-54297 CVE-2024-47607 affecting package gstreamer1-plugins-base 1.20.0-3

GStreamer is a library for constructing graphs of media-handling components. stack-buffer overflow has been detected in the gstopusdecparseheader function within gstopusdec.c'. The pos array is a stack-allocated buffer of size 64. If nchannels exceeds 64, the for loop will write beyond the...

9.8CVSS7.3AI score0.01201EPSS
SaveExploits0References1
OSV
OSV
•added 2024/12/12 12:00 a.m.•18 views

UBUNTU-CVE-2024-47607

GStreamer is a library for constructing graphs of media-handling components. stack-buffer overflow has been detected in the gstopusdecparseheader function within gstopusdec.c'. The pos array is a stack-allocated buffer of size 64. If nchannels exceeds 64, the for loop will write beyond the...

9.8CVSS7.4AI score0.01201EPSS
SaveExploits0References6
Debian CVE
Debian CVE
•added 2024/12/11 7:13 p.m.•24 views

CVE-2024-47607

GStreamer is a library for constructing graphs of media-handling components. stack-buffer overflow has been detected in the gstopusdecparseheader function within gstopusdec.c'. The pos array is a stack-allocated buffer of size 64. If nchannels exceeds 64, the for loop will write beyond the...

9.8CVSS7.8AI score0.01201EPSS
SaveExploits0
CNNVD
CNNVD
•added 2024/12/11 12:00 a.m.•6 views

GStreamer 安全漏洞

GStreamer is the GStreamer open source set of frameworks for processing streaming media. A security vulnerability exists in GStreamer that stems from a stack buffer overflow detected in the gstopusdecparseheader function in gstopusdec.c. The vulnerability is caused by the detection of a stack...

9.8CVSS8.4AI score0.01201EPSS
SaveExploits0References5
Tenable Nessus
Tenable Nessus
•added 2024/12/07 12:00 a.m.•4 views

FreeBSD : gstreamer1-plugins-opus -- Stack buffer-overflow in Opus decoder (7d1b4e5d-b3e8-11ef-b680-4ccc6adda413)

The version of FreeBSD installed on the remote host is prior to tested version. It is, therefore, affected by a vulnerability as referenced in the 7d1b4e5d-b3e8-11ef-b680-4ccc6adda413 advisory. The GStreamer Security Center reports: Stack buffer-overflow in Opus decoder that can cause crashes for...

9.8CVSS7.7AI score0.01201EPSS
SaveExploits0References3
FreeBSD
FreeBSD
•added 2024/12/03 12:00 a.m.•16 views

gstreamer1-plugins-opus -- Stack buffer-overflow in Opus decoder

The GStreamer Security Center reports: Stack buffer-overflow in Opus decoder that can cause crashes for certain input files...

9.8CVSS6.9AI score0.01201EPSS
SaveExploits0References1
HackRead
HackRead
•added 2024/09/11 3:32 a.m.•15 views

Opus Security Elevates Vulnerability Management With its AI-Powered Multi-Layered Prioritization Engine

Palo Alto, USA/California, 11th September 2024, CyberNewsWire...

7.3AI score
SaveExploits0
Github Security Blog
Github Security Blog
•added 2024/07/10 6:33 a.m.•53 views

@discordjs/opus vulnerable to Denial of Service

All versions of the package @discordjs/opus are vulnerable to Denial of Service DoS due to providing an input object with a property toString to several different functions. Exploiting this vulnerability could lead to a process crash...

7.5CVSS7.5AI score0.00597EPSS
SaveExploits0References5Affected Software1
vulnersOsv
vulnersOsv
•added 2024/07/10 6:33 a.m.•3 views

24-hr-music (1.0.3), 2pg-music (>=1.0.0, <=1.1.2) +151 more potentially affected by CVE-2024-21521 via @discordjs/opus (>=0.1.0, <=0.8.0)

@discordjs/opus NPM version =0.1.0, =1.0.0, =1.1.2, =1.0.0, =1.0.3, =1.0.1, =1.0.0, =0.1.0, =1.0.0, =1.0.0, =1.0.1 and more Source cves: CVE-2024-21521 Source advisory: OSV:GHSA-43WQ-XRCM-3VGR...

7.5CVSS5.3AI score0.00597EPSS
SaveExploits0
OSV
OSV
•added 2024/07/10 6:33 a.m.•64 views

GHSA-43WQ-XRCM-3VGR @discordjs/opus vulnerable to Denial of Service

All versions of the package @discordjs/opus are vulnerable to Denial of Service DoS due to providing an input object with a property toString to several different functions. Exploiting this vulnerability could lead to a process crash...

8.7CVSS7.4AI score0.00597EPSS
SaveExploits0References5
OSV
OSV
•added 2024/07/10 5:15 a.m.•15 views

CVE-2024-21522

All versions of the package audify are vulnerable to Improper Validation of Array Index when frameSize is provided to the new OpusDecoder.decode or new OpusDecoder.decodeFloat functions it is not checked for negative values. This can lead to a process crash...

7.5CVSS5.8AI score0.00616EPSS
SaveExploits0References4
NVD
NVD
•added 2024/07/10 5:15 a.m.•41 views

CVE-2024-21521

All versions of the package @discordjs/opus are vulnerable to Denial of Service DoS due to providing an input object with a property toString to several different functions. Exploiting this vulnerability could lead to a system crash...

7.5CVSS0.00597EPSS
SaveExploits0References3
attackerkb
attackerkb
•added 2024/07/10 5:15 a.m.•8 views

CVE-2024-21522

All versions of the package audify are vulnerable to Improper Validation of Array Index when frameSize is provided to the new OpusDecoder.decode or new OpusDecoder.decodeFloat functions it is not checked for negative values. This can lead to a process crash...

7.5CVSS6AI score0.00616EPSS
SaveExploits0References5
OSV
OSV
•added 2024/07/10 5:15 a.m.•14 views

CVE-2024-21521

All versions of the package @discordjs/opus are vulnerable to Denial of Service DoS due to providing an input object with a property toString to several different functions. Exploiting this vulnerability could lead to a system crash...

7.5CVSS5.8AI score0.00597EPSS
SaveExploits0References3
Cvelist
Cvelist
•added 2024/07/10 5:00 a.m.•29 views

CVE-2024-21521

All versions of the package @discordjs/opus are vulnerable to Denial of Service DoS due to providing an input object with a property toString to several different functions. Exploiting this vulnerability could lead to a system crash...

7.5CVSS0.00597EPSS
SaveExploits0References3
CVE
CVE
•added 2024/07/10 5:00 a.m.•76 views

CVE-2024-21521

CVE-2024-21521 affects the @discordjs/opus package (native bindings to libopus). The vulnerability arises when an input object with a toString property is passed to several functions, potentially causing a system crash (DoS). If exploiting details are provided, they would be consistent with a Den...

7.5CVSS7AI score0.00597EPSS
SaveExploits0References3
Vulnrichment
Vulnrichment
•added 2024/07/10 5:00 a.m.•16 views

CVE-2024-21521

All versions of the package @discordjs/opus are vulnerable to Denial of Service DoS due to providing an input object with a property toString to several different functions. Exploiting this vulnerability could lead to a system crash...

7.5CVSS6.8AI score0.00597EPSS
SaveExploits0References3
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2024/07/10 12:00 a.m.•4 views

CVE-2024-21521: Uncontrolled Resource Consumption

All versions of the package @discordjs/opus are vulnerable to Denial of Service DoS due to providing an input object with a property toString to several different functions. Exploiting this vulnerability could lead to a system crash...

7.5CVSS6AI score0.00597EPSS
SaveExploits0References1
CNNVD
CNNVD
•added 2024/07/10 12:00 a.m.•13 views

Audify.js Security Vulnerability

Audify.js is an application by the individual developer Almog Hamdani. It is used to play, stream, and record PCM audio data, and encode and decode Opus into PCM audio data. Audify.js suffers from a security vulnerability that stems from vulnerability to improper validation of array indexes, whic...

7.5CVSS6.8AI score0.00616EPSS
SaveExploits0References5
CNNVD
CNNVD
•added 2024/07/10 12:00 a.m.•17 views

opus security breach

opus is an open source native binding to libopus v1.3 by discord.js. A security vulnerability exists in opus that stems from supplying input objects with the toString attribute to several different functions, making it susceptible to denial of service DoS attacks...

7.5CVSS6.7AI score0.00597EPSS
SaveExploits0References4
Rows per page
Query Builder