music-metadata is a metadata parser for audio and video media files. In the public development revision introduced after 11.14.0, a development-branch regression in the MP4 stsd sample-description parser allows an attacker-controlled sample-entry size of zero to prevent the StsdAtom.get cursor from advancing while an attacker-controlled entry_count keeps the synchronous loop running. A crafted MP4-family input can block the Node.js event loop and grow the sample-description table until the proce
music-metadata is a metadata parser for audio and video media files. Prior to 11.15.0, the DSF parser handles an unrecognized chunk by calling tokenizer.ignore without awaiting the returned promise and without first rejecting a chunk size smaller than the 12-byte chunk header. A crafted DSF input can produce a negative ignore length; with strtok3 10.3.5 or later, the resulting RangeError is detached from the parseBuffer promise and becomes an unhandled rejection under Node.js default behavior. T
Information loss in CORS in Google Chrome prior to 155.0.8059.39 allowed a remote attacker to bypass web origin policy via crafted network traffic. (Chromium security severity: Low)
Out-of-bounds read in Microsoft Office PowerPoint allows an unauthorized attacker to disclose information locally.
Out-of-bounds read in Windows NTFS allows an authorized attacker to disclose information locally.
Missing authorization in DNS Server allows an authorized attacker to perform tampering locally.
Integer underflow (wrap or wraparound) in Windows NTFS allows an authorized attacker to disclose information locally.
Access of resource using incompatible type ('type confusion') in Windows Message Queuing Queue Manager allows an authorized attacker to disclose information locally.
Untrusted pointer dereference in Microsoft Windows Search Component allows an authorized attacker to disclose information locally.
Exposure of sensitive system information to an unauthorized control sphere in Windows Secure Kernel Mode allows an authorized attacker to disclose information locally.
Heap-based buffer overflow in Windows Storage Port Driver allows an unauthorized attacker to elevate privileges with a physical attack.
Out-of-bounds read in Windows USB Print Driver allows an authorized attacker to disclose information locally.
Out-of-bounds read in Windows Imaging Component allows an authorized attacker to disclose information locally.
Missing authentication for critical function in Windows Security Account Manager allows an authorized attacker to perform tampering locally.
Buffer over-read in Windows Management Instrumentation allows an authorized attacker to disclose information locally.
Use of uninitialized resource in Windows Modern Device Management (MDM) allows an authorized attacker to disclose information locally.
Use of uninitialized resource in Windows Kernel-Mode Drivers allows an authorized attacker to disclose information locally.
Buffer over-read in Windows Win32 Kernel Subsystem allows an authorized attacker to disclose information locally.
Out-of-bounds read in WebDAV allows an authorized attacker to disclose information locally.
Out-of-bounds read in Remote Desktop Display Driver allows an authorized attacker to disclose information locally.