CVE-2023-27643 - An issue found in POWERAMP 925-bundle-play and Poweramp 954-uni allows a remote attacker to cause a denial of service via the Rescan button in Queue and Select Folders button in Library

Back Back to CVE browser

HIGH

An issue found in POWERAMP 925-bundle-play and Poweramp 954-uni allows a remote attacker to cause a denial of service via the Rescan button in Queue and Select Folders button in Library

Published Apr 14, 2023

7.5

HIGH

CVSS 3.1

EPSS 1.47%

Description

An issue found in POWERAMP 925-bundle-play and Poweramp 954-uni allows a remote attacker to cause a denial of service via the Rescan button in Queue and Select Folders button in Library

Affected products

Remediation

No remediation recorded yet.

Weaknesses (2)

CWE-400

Uncontrolled Resource Consumption

CWE-770

Allocation of Resources Without Limits

References (4)

https://euvd.enisa.europa.eu/vulnerability/EUVD-2023-31379
Advisory
https://github.com/LianKee/SODA/blob/main/CVEs/CVE-2023-27643/CVE%20detail.md
ExploitThird Party Advisory
https://play.google.com/store/apps/details?id=com.maxmpz.audioplayer
Product
https://powerampapp.com/
Product

Link	Providers	Tags
https://euvd.enisa.europa.eu/vulnerability/EUVD-2023-31379		Advisory
https://github.com/LianKee/SODA/blob/main/CVEs/CVE-2023-27643/CVE%20detail.md		ExploitThird Party Advisory
https://play.google.com/store/apps/details?id=com.maxmpz.audioplayer		Product
https://powerampapp.com/		Product

Change history (0)

No recorded changes yet.

Sources

CVE.org / MITRE

Status PUBLISHED

Assigner mitre

Published Apr 14, 2023

Updated Feb 10, 2025

Reserved Mar 5, 2023

Link CVE-2023-27643

CISA Vulnrichment

Updated Feb 10, 2025

NVD

Status Modified

Modified Jun 17, 2026

Link CVE-2023-27643

Red Hat

No data

ENISA EUVD

Assigner mitre

Published Apr 14, 2023

Updated Feb 10, 2025

Link EUVD-2023-31379

GitHub

No data