Flac Libflac vulnerabilities
6 known vulnerabilities affecting flac/libflac.
Total CVEs
6
CISA KEV
0
Public exploits
0
Exploited in wild
0
Severity breakdown
CRITICAL4HIGH2
Vulnerabilities
Page 1 of 1
CVE-2014-8962HIGHCVSS 7.5≤ 1.3.02014-11-26
CVE-2014-8962 [HIGH] CWE-119 CVE-2014-8962: Stack-based buffer overflow in stream_decoder.c in libFLAC before 1.3.1 allows remote attackers to e
Stack-based buffer overflow in stream_decoder.c in libFLAC before 1.3.1 allows remote attackers to execute arbitrary code via a crafted .flac file.
nvd
CVE-2014-9028HIGHCVSS 7.5≤ 1.3.02014-11-26
CVE-2014-9028 [HIGH] CWE-119 CVE-2014-9028: Heap-based buffer overflow in stream_decoder.c in libFLAC before 1.3.1 allows remote attackers to ex
Heap-based buffer overflow in stream_decoder.c in libFLAC before 1.3.1 allows remote attackers to execute arbitrary code via a crafted .flac file.
nvd
CVE-2007-6278CRITICALCVSS 9.3≤ 1.22007-12-07
CVE-2007-6278 [CRITICAL] CWE-20 CVE-2007-6278: Free Lossless Audio Codec (FLAC) libFLAC before 1.2.1 allows user-assisted remote attackers to force
Free Lossless Audio Codec (FLAC) libFLAC before 1.2.1 allows user-assisted remote attackers to force a client to download arbitrary files via the MIME-Type URL flag (-->) for the FLAC image file in a crafted .FLAC file.
nvd
CVE-2007-6277CRITICALCVSS 9.3≤ 1.22007-12-07
CVE-2007-6277 [CRITICAL] CVE-2007-6277: Multiple buffer overflows in Free Lossless Audio Codec (FLAC) libFLAC before 1.2.1 allow user-assist
Multiple buffer overflows in Free Lossless Audio Codec (FLAC) libFLAC before 1.2.1 allow user-assisted remote attackers to execute arbitrary code via large (1) Metadata Block Size, (2) VORBIS Comment String Size, (3) Picture Metadata MIME-TYPE Size, (4) Picture Description Size, (5) Picture Data Length, (6) Padding Length, and (7) PICTURE Metadata width and
nvd
CVE-2007-6279CRITICALCVSS 9.3≤ 1.22007-12-07
CVE-2007-6279 [CRITICAL] CWE-399 CVE-2007-6279: Multiple double free vulnerabilities in Free Lossless Audio Codec (FLAC) libFLAC before 1.2.1 allow
Multiple double free vulnerabilities in Free Lossless Audio Codec (FLAC) libFLAC before 1.2.1 allow user-assisted remote attackers to execute arbitrary code via malformed (1) Seektable values or (2) Seektable Data Offsets in a .FLAC file.
nvd
CVE-2007-4619CRITICALCVSS 9.3≤ 1.22007-10-12
CVE-2007-4619 [CRITICAL] CWE-189 CVE-2007-4619: Multiple integer overflows in Free Lossless Audio Codec (FLAC) libFLAC before 1.2.1, as used in Wina
Multiple integer overflows in Free Lossless Audio Codec (FLAC) libFLAC before 1.2.1, as used in Winamp before 5.5 and other products, allow user-assisted remote attackers to execute arbitrary code via a malformed FLAC file that triggers improper memory allocation, resulting in a heap-based buffer overflow.
nvd