Astra Linux – vulnerability in sox

A heap-based buffer overflow vulnerability exists in the startread functionality of Sound Exchange libsox 14.4.2 and master commit 42b3557e. A specially crafted file can lead to a heap buffer overflow. An attacker can provide a malicious file to trigger this vulnerability...

Astra Linux – Vulnerability in Linux

In the Linux kernel, the following vulnerabilities have been resolved: media: zr364xx: fixed a memory leak in zr364xxstartreadpipe syzbot reported a memory leak in the zr364xx driver. The issue occurred in non-freeed urb situations when usbsubmiturb failed. Backtrace: kmalloc...

PT-2021-27814

Name of the Vulnerable Software and Affected Versions No specific software or versions are mentioned in the provided description. Description A heap-use-after-free READ 6 crash has been reported. The crash occurs in the following functions: dispatch print error, internal exr parse header, and exr...

PT-2021-27812

Name of the Vulnerable Software and Affected Versions No specific software or versions are mentioned in the provided description. Description The issue is related to a stack-buffer-overflow read crash. The crash occurs in the following functions: dispatch print error, internal exr parse header, a...

DEBIAN-CVE-2014-8145

Multiple heap-based buffer overflows in Sound eXchange SoX 14.4.1 and earlier allow remote attackers to have unspecified impact via a crafted WAV file to the 1 startread or 2 AdpcmReadBlock function...

UBUNTU-CVE-2014-8145

Multiple heap-based buffer overflows in Sound eXchange SoX 14.4.1 and earlier allow remote attackers to have unspecified impact via a crafted WAV file to the 1 startread or 2 AdpcmReadBlock function...

PT-2014-8433

Name of the Vulnerable Software and Affected Versions SoX versions 14.4.1 and earlier Description The issue is related to multiple heap-based buffer overflows that can be triggered by remote attackers sending a crafted WAV file. This can affect the start read or AdpcmReadBlock function, potential...