Vulmon Recent Vulnerabilities Research Posts Trends Blog About Contact

audio file library project audio file library vulnerabilities and exploits

(subscribe to this query)
8.8
CVSSv3
CVE-2022-32114
An unrestricted file upload vulnerability in the Add New Assets function of Strapi 4.1.12 allows malicious users to conduct XSS attacks via a crafted PDF file. NOTE: the project documentation suggests that a user with the Media Library "Create (upload)" permission is su...
Strapi Strapi 4.1.12
6.5
CVSSv3
CVE-2022-24599
In autofile Audio File Library 0.3.6, there exists one memory leak vulnerability in printfileinfo, in printinfo.c, which allows an malicious user to leak sensitive information via a crafted file. The printfileinfo function calls the copyrightstring function to get data, however, ...
Audio File Library Project Audio File Library 0.3.6Debian Debian Linux 10.0Fedoraproject Fedora 37Fedoraproject Fedora 38Fedoraproject Fedora 39
8.8
CVSSv3
CVE-2021-3246
A heap buffer overflow vulnerability in msadpcm_decode_block of libsndfile 1.0.30 allows malicious users to execute arbitrary code via a crafted WAV file.
Libsndfile Project Libsndfile 1.0.30Fedoraproject Fedora 33Fedoraproject Fedora 34Debian Debian Linux 9.0Debian Debian Linux 10.0
8.8
CVSSv3
CVE-2015-7747
Buffer overflow in the afReadFrames function in audiofile (aka libaudiofile and Audio File Library) allows user-assisted remote malicious users to cause a denial of service (program crash) or possibly execute arbitrary code via a crafted audio file, as demonstrated by sixteen-ste...
Canonical Ubuntu Linux 12.04Canonical Ubuntu Linux 14.04Canonical Ubuntu Linux 15.04Canonical Ubuntu Linux 15.10Fedoraproject Fedora 23Audio File Library Project Audio File Library
6.5
CVSSv3
CVE-2019-13147
In Audio File Library (aka audiofile) 0.3.6, there exists one NULL pointer dereference bug in ulaw2linear_buf in G711.cpp in libmodules.a that allows an malicious user to cause a denial of service via a crafted file.
Audio File Library Project Audio File Library 0.3.6Debian Debian Linux 10.0
8.8
CVSSv3
CVE-2018-17095
An issue has been discovered in mpruett Audio File Library (aka audiofile) 0.3.6, 0.3.5, 0.3.4, 0.3.3, 0.3.2, 0.3.1, 0.3.0. A heap-based buffer overflow in Expand3To4Module::run has occurred when running sfconvert.
Audio File Library Project Audio File Library 0.3.0Audio File Library Project Audio File Library 0.3.1Audio File Library Project Audio File Library 0.3.2Audio File Library Project Audio File Library 0.3.3Audio File Library Project Audio File Library 0.3.4Audio File Library Project Audio File Library 0.3.5Audio File Library Project Audio File Library 0.3.6Canonical Ubuntu Linux 14.04
6.5
CVSSv3
CVE-2018-13440
The audiofile Audio File Library 0.3.6 has a NULL pointer dereference bug in ModuleState::setup in modules/ModuleState.cpp, which allows an malicious user to cause a denial of service via a crafted caf file, as demonstrated by sfconvert.
Audio File Library Project Audio File Library 0.3.6Canonical Ubuntu Linux 14.04
5.6
CVSSv3
CVE-2017-5715
Systems with microprocessors utilizing speculative execution and indirect branch prediction may allow unauthorized disclosure of information to an attacker with local user access via a side-channel analysis.
Intel Atom C C2308Intel Atom C C2316Intel Atom C C2338Intel Atom C C2350Intel Atom C C2358Intel Atom C C2508Intel Atom C C2516Intel Atom C C2518Intel Atom C C2530Intel Atom C C2538Intel Atom C C2550Intel Atom C C2558Intel Atom C C2718Intel Atom C C2730Intel Atom C C2738Intel Atom C C2750Intel Atom C C2758Intel Atom C C3308Intel Atom C C3338Intel Atom C C3508Intel Atom C C3538Intel Atom C C3558
5.6
CVSSv3
CVE-2017-5753
Systems with microprocessors utilizing speculative execution and branch prediction may allow unauthorized disclosure of information to an attacker with local user access via a side-channel analysis.
Intel Atom C C2308Intel Atom C C2316Intel Atom C C2338Intel Atom C C2350Intel Atom C C2358Intel Atom C C2508Intel Atom C C2516Intel Atom C C2518Intel Atom C C2530Intel Atom C C2538Intel Atom C C2550Intel Atom C C2558Intel Atom C C2718Intel Atom C C2730Intel Atom C C2738Intel Atom C C2750Intel Atom C C2758Intel Atom C C3308Intel Atom C C3338Intel Atom C C3508Intel Atom C C3538Intel Atom C C3558
NA
CVE-2009-1791
Heap-based buffer overflow in aiff_read_header in libsndfile 1.0.15 up to and including 1.0.19, as used in Winamp 5.552 and possibly other media programs, allows remote malicious users to cause a denial of service (application crash) and possibly execute arbitrary code via an AIF...
Mega-nerd Libsndfile 1.0.16Mega-nerd Libsndfile 1.0.15Nullsoft Winamp 5.552Mega-nerd Libsndfile 1.0.19Nullsoft Winamp 5.51Nullsoft Winamp 5.52Mega-nerd Libsndfile 1.0.18Mega-nerd Libsndfile 1.0.17Nullsoft Winamp 5.5Nullsoft Winamp 5.55Nullsoft Winamp 5.54Nullsoft Winamp 5.541
CVSSv3
CVSSv2
CVSSv3
VMScore
Recommendations:
blind SQL injectionSSRFbuffer overflowCVE-2023-28952CVE-2023-41822CVE-2024-27956CVE-2023-7028CVE-2024-34447CVE-2024-34460
Vulnerability Notification Service
You don’t have to wait for vulnerability scanning results
Get Started

Vulmon Search

Vulmon Search is a vulnerability search engine. It gives comprehensive vulnerability information through a very simple user interface.

About

Home Recent Vulnerabilities Research Posts Trends Blog About Contact

Products

Vulmon Search Vulmon Research Vulmon Alerts Vulmap

Connect

Twitter Reddit Linkedin Facebook