VideoLAN VLC media player buffer overflow vulnerability (CNVD-2019-31069)

VideoLAN VLC media player is a free, open source cross-platform multimedia player also a multimedia framework organized by VideoLAN France. The product supports the playback of a variety of media files, CD-ROMs, etc., a variety of audio and video formats WMV, MP3, etc. and so on. A buffer error...

Out-of-bounds Read

Overview Affected versions of this package are vulnerable to Out-of-bounds Read barknoisehybridmp in psy.c in Xiph.Org libvorbis 1.3.6 has a stack-based buffer over-read. Remediation There is no fixed version for vorbis. References - Gitlab.xiph.org...

Xiph.Org libao '_tokenize_matrix' function denial of service vulnerability

Xiph.Org libao is a cross-platform audio library capable of outputting audio on a variety of different platforms. A security vulnerability exists in the 'tokenizematrix' function of the audioout.c file in Xiph.Org libao version 1.2.0. A remote attacker can exploit this vulnerability to cause a...

CVE-2017-11548

The tokenizematrix function in audioout.c in Xiph.Org libao 1.2.0 allows remote attackers to cause a denial of service memory corruption via a crafted MP3 file...

CVE-2015-6749

Buffer overflow in the aiffopen function in oggenc/audio.c in vorbis-tools 1.4.0 and earlier allows remote attackers to cause a denial of service crash via a crafted AIFF file...

Multiple libvorbis flaws (CVE-2007-4066, CVE-2007-4029)

Multiple buffer overflows in Xiph.Org libvorbis before 1.2.0 allow context-dependent attackers to cause a denial of service or have other unspecified impact via a crafted OGG file, aka trac Changesets 13162, 13168, 13169, 13170, 13172, 13211, and 13215, as demonstrated by an overflow in oggenc.ex...