Catalog
Vulnerability catalog
Search by CVE, product, or vendor. Filter by severity, CISA KEV, source, stack, and weakness. Filtered views stay out of the search index.
- Medium6.9SoX through 14.4.2 contains a heap out-of-bounds write vulnerability in lsx_ms_adpcm_block_expand_i() in src/adpcm.c, triggered by an odd samplesPerBlock value in the…Check if you run itEPSS 0.13%Oct 15, 2026
- Medium6.9libTiMidity through 0.2.8 contains an out-of-bounds access vulnerability in init_soundfont() in src/sndfont.c that allows attackers to corrupt memory by supplying unva…Check if you run itEPSS 0.13%Oct 15, 2026
- Medium6.9libTiMidity through 0.2.8 contains a heap out-of-bounds read vulnerability in the SoundFont loader in src/sndfont.c that uses unvalidated sampleId and instrument gener…Check if you run itEPSS 0.13%Oct 15, 2026
- Medium6.9libTiMidity through 0.2.8 contains a stack out-of-bounds write vulnerability in the SoundFont loader that allows attackers to corrupt stack memory via unchecked genera…Check if you run itEPSS 0.13%Oct 15, 2026
- Medium6.8Game Music Emu (libgme) through 0.6.5 contains a global out-of-bounds read vulnerability in Classic_Emu::mute_voices_ that allows attackers to crash applications by su…Check if you run itEPSS 0.13%Oct 15, 2026
- Medium6.8Game Music Emu (libgme) through 0.6.5 contains a heap out-of-bounds read vulnerability in the AY loader get_data function caused by an integer underflow in the track-t…Check if you run itEPSS 0.13%Oct 15, 2026
- Medium6.9OpenJPH through 0.32.0 contains a heap out-of-bounds write vulnerability in the HTJ2K cleanup-pass decoder that allows attackers to corrupt memory via one-row codeblocks.Check if you run itEPSS 0.13%Oct 15, 2026
- Medium6.8ValleyBell libvgm through commit a6eed945 contains a heap out-of-bounds read vulnerability in the PCM data-block decompressor caused by an unbounded compression-table index.Check if you run itEPSS 0.13%Oct 15, 2026
- Medium6.9FreeImage (danoli3 fork) through 3.19.23 contains a heap out-of-bounds read vulnerability in Unpack32Bits() in PluginPICT.cpp because rowBytes is never checked against…Check if you run itEPSS 0.13%Oct 15, 2026
- Medium6.8libsidplayfp through 3.1.1 contains a heap out-of-bounds read vulnerability that allows attackers to crash applications by supplying a PSID/RSID file with an unchecked data offset.Check if you run itEPSS 0.13%Oct 15, 2026
- Medium6.9Libyal libesedb through 20260704 contains a heap out-of-bounds read vulnerability in libesedb_record_get_multi_value() that allows attackers to read past buffers via u…Check if you run itEPSS 0.13%Oct 15, 2026
- Medium6.9ytnef through 2.1.2 contains a heap out-of-bounds read vulnerability in MAPIPrint() that allows attackers to read past heap allocations by supplying compressed RTF properties.Check if you run itEPSS 0.13%Oct 15, 2026
- Medium6.9ytnef through 2.1.2 contains a heap out-of-bounds read vulnerability in DecompressRTF() in lib/ytnef.c that never validates uncompressedSize for uncompressed RTF streams.Check if you run itEPSS 0.13%Oct 15, 2026
- Medium6.8libansilove 1.3.0 through 1.4.2 contains a NULL pointer dereference vulnerability in ansilove_xbin() that allows attackers to crash applications by supplying a crafted XBIN file.Check if you run itEPSS 0.13%Oct 15, 2026
- Medium6.8Ansilove libansilove through 1.4.2 contains an out-of-bounds read vulnerability in ansilove_xbin() in src/loaders/xbin.c that lacks bounds checks for compressed run-length records.Check if you run itEPSS 0.13%Oct 15, 2026
- Medium6.8Zziplib through 0.13.80 contains an out-of-bounds read vulnerability in zzip/mmapped.c that allows attackers to over-read heap memory via a crafted ZIP central directory.Check if you run itEPSS 0.13%Oct 15, 2026
- Medium5.7zziplib through 0.13.80 contains an out-of-bounds read vulnerability in __zzip_parse_root_directory() in zzip/zip.c that allows attackers to read past the mapped centr…Check if you run itEPSS 0.12%Oct 15, 2026
- Medium6.9libregf through 20260526 contains a heap out-of-bounds read in libregf_value_item_read_value_data() because it bounds value data size without subtracting the 4-byte ol…Check if you run itEPSS 0.13%Oct 15, 2026
- Medium6.8NetSurf libnsbmp through 0.1.7 contains an out-of-bounds read vulnerability in bmp_decode_mask() that allows attackers to read one byte past the image buffer by supply…Check if you run itEPSS 0.13%Oct 15, 2026
- Medium6.8NetSurf libnsbmp through 0.1.7 contains an out-of-bounds read vulnerability in bmp_decode_rle8() and bmp_decode_rle4() because absolute-run bound checks omit the word-…Check if you run itEPSS 0.13%Oct 15, 2026
- Medium6.9libsmi through 0.5.0 contains an out-of-bounds write vulnerability in smiValueAsString() in lib/smi.c that allows attackers to overflow a fixed 1024-byte static buffer…Check if you run itEPSS 0.13%Oct 15, 2026
- Medium6.9libInstPatch through 1.1.7 contains a heap out-of-bounds write vulnerability in the SoundFont 2 loader because ipatch_sf2_gen_is_valid() does not range-check generator…Check if you run itEPSS 0.20%Oct 15, 2026
- Medium6.9libfwsi through 20260522 contains a heap out-of-bounds read vulnerability in libfwsi_mtp_volume_values_read_data() that allows attackers to read past buffer bounds via…Check if you run itEPSS 0.13%Oct 15, 2026
- Medium6.9libfwsi through 20260522 contains a heap out-of-bounds read vulnerability in libfwsi_mtp_file_entry_values_read_data() that allows attackers to read past buffer bounds…Check if you run itEPSS 0.13%Oct 15, 2026
- Medium6.9libfsapfs through 20260921 contains an integer underflow in libfsapfs_key_encrypted_key_read_data() that allows attackers to trigger heap out-of-bounds reads via craft…Check if you run itEPSS 0.20%Oct 15, 2026