Vulnerabilities

TI-2024-22060 CVE-2024-33431 · GHSA-39cp-8qfj-8cjm

An issue in phiola/src/afilter/conv.c:115 of phiola v2.0-rc22 allows a remote attacker to…

LOW 37

An issue in phiola/src/afilter/conv.c:115 of phiola v2.0-rc22 allows a remote attacker to cause a denial of service via a crafted .wav file.

CVSS 3.1MEDIUM 6.5 Network No auth User interaction EPSS 0.0089 Published 2024-05-01 No fix listed CWE-670

TI-2024-22059 CVE-2024-33430 · GHSA-77q6-5h9c-2c36

MEDIUM 43

An issue in phiola/src/afilter/pcm_convert.h:513 of phiola v2.0-rc22 allows a remote attacker to execute arbitrary code via the a crafted .wav file.

CVSS 3.1HIGH 8.8 Network No auth User interaction EPSS 0.01371 Published 2024-05-01 No fix listed CWE-482

TI-2024-22058 CVE-2024-33429 · GHSA-x363-pjcf-82m7

HIGH 66

Buffer-Overflow vulnerability at pcm_convert.h:513 of phiola v2.0-rc22 allows a remote attacker to execute arbitrary code via a crafted .wav file.

CVSS 3.1HIGH 7.1 Network Low privileges No interaction EPSS 0.01098 Published 2024-05-01 No fix listed CWE-122

TI-2024-22057 CVE-2024-33428 · GHSA-pq6w-8h36-7f4v

HIGH 79

Buffer-Overflow vulnerability at conv.c:68 of stsaz phiola v2.0-rc22 allows a remote attacker to execute arbitrary code via the a crafted .wav file.

CVSS 3.1HIGH 8.8 Network No auth User interaction EPSS 0.0116 Published 2024-05-01 No fix listed CWE-122