CVE-2019-18795 - The BASS Audio Library 2.4.14 under Windows is prone to a BASS_StreamCreateFile out of bounds read vulnerability via a crafted .wav file

Back Back to CVE browser

MEDIUM

The BASS Audio Library 2.4.14 under Windows is prone to a BASS_StreamCreateFile out of bounds read vulnerability via a crafted .wav file

Published Oct 16, 2020

6.5

MEDIUM

CVSS 3.1

EPSS 1.29%

Description

The BASS Audio Library 2.4.14 under Windows is prone to a BASS_StreamCreateFile out of bounds read vulnerability via a crafted .wav file. An attacker can exploit this issues to gain access to sensitive information that may aid in further attacks. A failure in exploitation leads to denial of service.

Affected products

Remediation

No remediation recorded yet.

Weaknesses (1)

CWE-125

Out-of-bounds Read

References (3)

http://www.un4seen.com/
x_refsource_MISCVendor Advisory
https://euvd.enisa.europa.eu/vulnerability/EUVD-2019-8500
Advisory
https://github.com/staufnic/CVE/tree/master/CVE-2019-18795
x_refsource_MISCThird Party Advisory

Link	Providers	Tags
http://www.un4seen.com/		x_refsource_MISCVendor Advisory
https://euvd.enisa.europa.eu/vulnerability/EUVD-2019-8500		Advisory
https://github.com/staufnic/CVE/tree/master/CVE-2019-18795		x_refsource_MISCThird Party Advisory