Export limit exceeded: 425803 CVEs match your query. Please refine your search to export 10,000 CVEs or fewer.

Search vulnerabilities

Results 7

Export CSV
CVE-2009-1791

libsndfile AIFF file heap based buffer overflow

Heap-based buffer overflow in aiff_read_header in libsndfile 1.0.15 through 1.0.19, as used in Winamp 5.552 and possibly other media programs, allows remote attackers to cause a denial of service (application crash) and possibly execute arbitrary code via an AIFF file with an invalid header value.

CVSS 2.0 · 9.3 Critical EPSS 6.5% KEV · Not listed
Products
CVE-2009-0186

libsndfile: overflows may lead to execution of arbitrary code

Integer overflow in libsndfile 1.0.18, as used in Winamp and other products, allows context-dependent attackers to execute arbitrary code via crafted description chunks in a CAF audio file, leading to a heap-based buffer overflow.

CVSS 2.0 · 9.3 Critical EPSS 3.6% KEV · Not listed
Products
CVE-2009-1788

libsndfile VOC file heap based buffer overflow

Heap-based buffer overflow in voc_read_header in libsndfile 1.0.15 through 1.0.19, as used in Winamp 5.552 and possibly other media programs, allows remote attackers to cause a denial of service (application crash) and possibly execute arbitrary code via a VOC file with an invalid header value.

CVSS 2.0 · 9.3 Critical EPSS 8.2% KEV · Not listed
Products
CVE-2007-4974

Heap overflow in libsndfile triggerable by seeks

Heap-based buffer overflow in the flac_buffer_copy function in libsndfile 1.0.17 and earlier might allow remote attackers to execute arbitrary code via a FLAC file with crafted PCM data containing a block with a size that exceeds the previous block size.

CVSS 2.0 · 7.5 High EPSS 4.5% KEV · Not listed
Vendors
Products
CVE-2015-7805

libsndfile: Heap overflow vulnerability when parsing specially crafted AIFF header

Heap-based buffer overflow in libsndfile 1.0.25 allows remote attackers to have unspecified impact via the headindex value in the header in an AIFF file.

CVSS 2.0 · 9.3 Critical EPSS 14.3% KEV · Not listed
Products
CVE-2009-4835

The (1) htk_read_header, (2) alaw_init, (3) ulaw_init, (4) pcm_init, (5) float32_init, and (6) sds_read_header functions in libsndfile 1.0.20 allow context-dependent attackers to cause a denial of service (divide-by-zero error and application crash) via a crafted audio file.

CVSS 2.0 · 4.3 Medium EPSS 1.4% KEV · Not listed
Vendors
Products
CVE-2011-2696

libsndfile: Application crash due integer overflow by processing certain PAF audio files

Integer overflow in libsndfile before 1.0.25 allows remote attackers to cause a denial of service (application crash) or possibly execute arbitrary code via a crafted PARIS Audio Format (PAF) file that triggers a heap-based buffer overflow.

CVSS 2.0 · 6.8 Medium EPSS 4.6% KEV · Not listed
Vendors