2Ourc3

Name of the Vulnerable Software and Affected Versions: libsndfile versions prior to 1.2.2 Description: A buffer overflow exists when processing malformed IRCAM audio files. The issue occurs in the `ircam read header` function at src/ircam.c:164 during sample rate processing, potentially leading to memory corruption and code execution. Recommendations: Update to a version of libsndfile later than 1.2.2.

**Name of the Vulnerable Software and Affected Versions** macOS versions prior to Sequoia 15.6 macOS versions prior to Sonoma 14.7.7 macOS versions prior to Ventura 13.7.7 **Description** An out-of-bounds read issue was addressed through enhanced input validation. Processing a maliciously crafted file may lead to unexpected application termination. **Recommendations** Update to macOS Sequoia 15.6 or later. Update to macOS Sonoma 14.7.7 or later. Update to macOS Ventura 13.7.7 or later.

**Name of the Vulnerable Software and Affected Versions** GNU objdump version 2.43 **Description** The issue is related to a buffer overflow in the BFD (Binary File Descriptor) library's handling of tekhex format files. This could potentially lead to code execution. There is a mention of a critical buffer overflow risk, indicating the severity of the issue. It is recommended to monitor for suspicious activity on the local network. **Recommendations** For GNU objdump version 2.43, patch immediately to resolve the buffer overflow issue in the BFD library. As a temporary workaround, consider restricting the handling of tekhex format files until a patch is applied. Monitor for suspicious activity on the local network to minimize the risk of exploitation.

**Name of the Vulnerable Software and Affected Versions** 7-Zip versions prior to 24.08 **Description** The issue is related to a logic error in the processing of streams, which can lead to an infinite loop. This allows remote attackers to create a denial-of-service condition on affected installations of 7-Zip. Interaction with the library is required to exploit this vulnerability, but attack vectors may vary depending on the implementation. **Recommendations** For 7-Zip versions prior to 24.08, update to version 24.08 or later to resolve the issue. As a temporary workaround, consider restricting access to the `CopyCoder` component until a patch is available. Avoid using the `CopyCoder` handler in the affected 7-Zip installations to minimize the risk of exploitation.

**Name of the Vulnerable Software and Affected Versions** Google Chrome versions prior to 126.0.6478.182 Microsoft Edge (affected versions not specified) **Description** The issue is related to an inappropriate implementation in V8, which can lead to heap corruption via a crafted HTML page. This could allow a remote attacker to potentially exploit the vulnerability, resulting in unauthorized access to protected information, execution of arbitrary code, or denial of service. The vulnerability is associated with errors in data type conversion. **Recommendations** For Google Chrome versions prior to 126.0.6478.182, update to version 126.0.6478.182 or later to resolve the issue. For Microsoft Edge, at the moment, there is no information about a newer version that contains a fix for this vulnerability.