Stsaz

Records4All Threatist records

Exploited (KEV)0None in CISA KEV

CVSS critical0CVSS 9.0–10.0

CVSS high3CVSS 7.0–8.9

Exploited now

Stsaz records in CISA KEV

No Stsaz vulnerabilities are listed in CISA KEV.

Products in the NVD configurations · select one to filter the records

4 records

TI-2024-22057 CVE-2024-33428 · GHSA-pq6w-8h36-7f4v

HIGH 79

Buffer-Overflow vulnerability at conv.c:68 of stsaz phiola v2.0-rc22 allows a remote attacker to execute arbitrary code via the a crafted .wav file.

CVSS 3.1HIGH 8.8 Network No auth User interaction EPSS 0.0116 Published 2024-05-01 No fix listed CWE-122

TI-2024-22058 CVE-2024-33429 · GHSA-x363-pjcf-82m7

HIGH 66

Buffer-Overflow vulnerability at pcm_convert.h:513 of phiola v2.0-rc22 allows a remote attacker to execute arbitrary code via a crafted .wav file.

CVSS 3.1HIGH 7.1 Network Low privileges No interaction EPSS 0.01098 Published 2024-05-01 No fix listed CWE-122

TI-2024-22059 CVE-2024-33430 · GHSA-77q6-5h9c-2c36

MEDIUM 43

An issue in phiola/src/afilter/pcm_convert.h:513 of phiola v2.0-rc22 allows a remote attacker to execute arbitrary code via the a crafted .wav file.

CVSS 3.1HIGH 8.8 Network No auth User interaction EPSS 0.01371 Published 2024-05-01 No fix listed CWE-482

TI-2024-22060 CVE-2024-33431 · GHSA-39cp-8qfj-8cjm

LOW 37

An issue in phiola/src/afilter/conv.c:115 of phiola v2.0-rc22 allows a remote attacker to cause a denial of service via a crafted .wav file.

CVSS 3.1MEDIUM 6.5 Network No auth User interaction EPSS 0.0089 Published 2024-05-01 No fix listed CWE-670