Vendors / Un4seen Records 5 All Threatist records
Exploited (KEV) 0 None in CISA KEV
CVSS critical 1 CVSS 9.0–10.0
CVSS high 1 CVSS 7.0–8.9
Exploited now Un4seen records in CISA KEV No Un4seen vulnerabilities are listed in CISA KEV.
Components Products in the NVD configurations · select one to filter the records Priority HIGH 67
Stack-based buffer overflow in Un4seen XMPlay 3.3.0.5 and earlier allows remote attackers to execute arbitrary code via a M3U file containing a long (1) FileName, and cause a crash via a long (2) DisplayName.
CVSS 2.0 HIGH 7.5· Network · No auth · Interaction — · EPSS 0.59801 · Published 2006-11-22 · No fix listed
Priority MEDIUM 48
The BASSMIDI plugin 2.4.12.1 for Un4seen BASS Audio Library on Windows is prone to an out of bounds write vulnerability.
CVSS 3.1 CRITICAL 9.8· Network · No auth · No interaction · EPSS 0.03034 · Published 2020-10-16 · No fix listed CWE-787
Priority LOW 31
The BASS Audio Library 2.4.14 under Windows is prone to a BASS_StreamCreateFile Denial of Service vulnerability (infinite loop) via a crafted .mp3 file.
CVSS 3.1 MEDIUM 6.5· Network · No auth · User interaction · EPSS 0.00932 · Published 2020-10-16 · No fix listed CWE-835
Priority LOW 31
The BASS Audio Library 2.4.14 under Windows is prone to a BASS_StreamCreateFile out of bounds read vulnerability via a crafted .wav file.
CVSS 3.1 MEDIUM 6.5· Network · No auth · User interaction · EPSS 0.0129 · Published 2020-10-16 · No fix listed CWE-125
Priority LOW 31
The BASS Audio Library 2.4.14 under Windows is prone to a BASS_StreamCreateFile Use after Free vulnerability via a crafted .ogg file.
CVSS 3.1 MEDIUM 6.5· Network · No auth · User interaction · EPSS 0.01085 · Published 2020-10-16 · No fix listed CWE-416
Open these records in search → All records by CVSS severity
Critical1 High1 Medium3 Low0 No CVSS0