Search vulnerabilities

Use the Query Builder to create your own search query, or check out the documentation to learn the search syntax.

Results 9

Export CSV
CVE-2017-9258

soundtouch: Infinite loop in the TDStretch::processSamples function

The TDStretch::processSamples function in source/SoundTouch/TDStretch.cpp in SoundTouch 1.9.2 allows remote attackers to cause a denial of service (infinite loop and CPU consumption) via a crafted wav file.

CVSS 3.0 · 5.5 Medium EPSS 4.4% KEV · Not listed
Vendors
Surina
Products
Soundtouch
CVE-2017-9259

soundtouch: Memory allocation error in the TDStretch::acceptNewOverlapLength function

The TDStretch::acceptNewOverlapLength function in source/SoundTouch/TDStretch.cpp in SoundTouch 1.9.2 allows remote attackers to cause a denial of service (memory allocation error and application crash) via a crafted wav file.

CVSS 3.0 · 5.5 Medium EPSS 6.1% KEV · Not listed
Vendors
Surina
Products
Soundtouch
CVE-2017-9260

soundtouch: Heap-buffer over-read in the TDStretchSSE::calcCrossCorr function

The TDStretchSSE::calcCrossCorr function in source/SoundTouch/sse_optimized.cpp in SoundTouch 1.9.2 allows remote attackers to cause a denial of service (heap-based buffer over-read and application crash) via a crafted wav file.

CVSS 3.0 · 5.5 Medium EPSS 4.0% KEV · Not listed
Vendors
Surina
Products
Soundtouch
CVE-2018-17098

soundtouch: Heap corruption in WavFileBase class in WavFile.cpp

The WavFileBase class in WavFile.cpp in Olli Parviainen SoundTouch 2.0 allows remote attackers to cause a denial of service (heap corruption from size inconsistency) or possibly have unspecified other impact, as demonstrated by SoundStretch.

CVSS 3.0 · 8.8 High EPSS 2.8% KEV · Not listed
Vendors
Surina
Products
Soundtouch
CVE-2018-17097

soundtouch: Out-of-bounds heap write in WavOutFile::write()

The WavFileBase class in WavFile.cpp in Olli Parviainen SoundTouch 2.0 allows remote attackers to cause a denial of service (double free) or possibly have unspecified other impact, as demonstrated by SoundStretch.

CVSS 3.0 · 8.8 High EPSS 2.7% KEV · Not listed
Vendors
Surina
Products
Soundtouch
CVE-2018-17096

soundtouch: Assertion failure in BPMDetect class in BPMDetect.cpp

The BPMDetect class in BPMDetect.cpp in libSoundTouch.a in Olli Parviainen SoundTouch 2.0 allows remote attackers to cause a denial of service (assertion failure and application exit), as demonstrated by SoundStretch.

CVSS 3.0 · 6.5 Medium EPSS 2.3% KEV · Not listed
Vendors
Surina
Products
Soundtouch
CVE-2018-14045

soundtouch: Reachable assertion in FIRFilter.cpp causing denial of service

The FIRFilter::evaluateFilterMulti function in FIRFilter.cpp in libSoundTouch.a in Olli Parviainen SoundTouch 2.0 allows remote attackers to cause a denial of service (assertion failure and application exit), as demonstrated by SoundStretch.

CVSS 3.0 · 7.5 High EPSS 2.6% KEV · Not listed
Vendors
Surina
Products
Soundtouch
CVE-2018-14044

soundtouch: Reachable assertion in RateTransposer::setChannels() causing denial of service

The RateTransposer::setChannels function in RateTransposer.cpp in libSoundTouch.a in Olli Parviainen SoundTouch 2.0 allows remote attackers to cause a denial of service (assertion failure and application exit), as demonstrated by SoundStretch.

CVSS 3.0 · 7.5 High EPSS 2.6% KEV · Not listed
Vendors
Surina
Products
Soundtouch
CVE-2018-1000223

soundtouch: Heap-based buffer overflow in SoundStretch/WavFile.cpp:WavInFile::readHeaderBlock() potentially leading to code execution

soundtouch version up to and including 2.0.0 contains a Buffer Overflow vulnerability in SoundStretch/WavFile.cpp:WavInFile::readHeaderBlock() that can result in arbitrary code execution. This attack appear to be exploitable via victim must open maliocius file in soundstretch utility.

CVSS 3.0 · 8.8 High EPSS 2.4% KEV · Not listed
Vendors
Surina
Products
Soundtouch