Linuxsampler: >> Libgig Security Vulnerabilities
An issue was discovered in libgig 4.1.0. There is an out-of-bounds read in the "always assign the sample of the first dimension region of this region" feature of the function gig::Region::UpdateChunks in gig.cpp.
CVSS Score
8.8
EPSS Score
0.004
Published
2018-07-20
An issue was discovered in libgig 4.1.0. There is a heap-based buffer overflow in pData[1] access in the function store16 in helper.h.
CVSS Score
8.8
EPSS Score
0.004
Published
2018-07-20
An issue was discovered in libgig 4.1.0. There is an out-of-bounds read in the function RIFF::Chunk::Read in RIFF.cpp.
CVSS Score
8.8
EPSS Score
0.004
Published
2018-07-20
An issue was discovered in libgig 4.1.0. There is an out-of-bounds write in pData[0] access in the function store32 in helper.h.
CVSS Score
8.8
EPSS Score
0.004
Published
2018-07-20
An issue was discovered in libgig 4.1.0. There is an out-of-bounds write in the function DLS::Info::SaveString in DLS.cpp.
CVSS Score
8.8
EPSS Score
0.004
Published
2018-07-20
An issue was discovered in libgig 4.1.0. There is an out-of-bounds write in the function DLS::Info::UpdateChunks in DLS.cpp.
CVSS Score
8.8
EPSS Score
0.004
Published
2018-07-20
An issue was discovered in libgig 4.1.0. There is a heap-based buffer overflow in pData[1] access in the function store32 in helper.h.
CVSS Score
8.8
EPSS Score
0.004
Published
2018-07-20
An issue was discovered in libgig 4.1.0. There is an out-of-bounds write in pData[0] access in the function store16 in helper.h.
CVSS Score
8.8
EPSS Score
0.004
Published
2018-07-20
The gig::Region::Region function in gig.cpp in libgig 4.0.0 allows remote attackers to cause a denial of service (NULL pointer dereference and application crash) via a crafted gig file.
CVSS Score
6.5
EPSS Score
0.044
Published
2017-08-28
Page 2