Suyuanwang

A vulnerability was detected in Artifex MuPDF up to 1.28.5. This impacts the function free char list of the file source/pdf/pdf-xref.c of the component Signature Locking. Performing a manipulation results in double free. The attack may be initiated remotely. The exploit is now public and may be used. The patch is named 3984925b660afb8a781ddf504021e91be1bc671e. To fix this issue, it is recommended to deploy a patch.

A security vulnerability has been detected in michaelrsweet mxml 4.0.5/4.0.6. This affects the function mxml load data of the file mxml-file.c. The manipulation leads to use after free. The attack is possible to be carried out remotely. The exploit has been disclosed publicly and may be used. The project was informed of the problem early through an issue report but has not responded yet.

A vulnerability has been found in GPAC up to 26.07.0. This vulnerability affects the function gf m2ts decode ait of the file src/media tools/ait.c of the component AIT Parser. Such manipulation leads to out-of-bounds write. The attack may be launched remotely. The exploit has been disclosed to the public and may be used. The name of the patch is 6d2c21a1a688abb20d0111b608db3b6f44d348f4. Applying a patch is advised to resolve this issue.

**اسم البرنامج المصاب والإصدارات المتأثرة** libsndfile الإصدارات السابقة لـ 1.2.3 **الوصف** توجد مشكلة في مكون تحليل WAV ضمن الدالة `wavlike subchunk parse()` في الملف `src/wavlike.c`. يمكن أن تؤدي عملية تلاعب معينة إلى استخدام متغير غير مهيأ، مما يسمح بالاستغلال عن بُعد. **التوصيات** في الوقت الحالي، لا توجد معلومات حول إصدار أحدث يحتوي على إصلاح لهذه الثغرة.