Suyuanwang

A vulnerability has been found in GPAC up to 26.07.0. This vulnerability affects the function gf m2ts decode ait of the file src/media tools/ait.c of the component AIT Parser. Such manipulation leads to out-of-bounds write. The attack may be launched remotely. The exploit has been disclosed to the public and may be used. The name of the patch is 6d2c21a1a688abb20d0111b608db3b6f44d348f4. Applying a patch is advised to resolve this issue.

A vulnerability was found in libsndfile up to 1.2.2. This issue affects the function wavlike subchunk parse of the file src/wavlike.c of the component WAV Parsing. Performing a manipulation results in use of uninitialized variable. Remote exploitation of the attack is possible. The exploit has been made public and could be used. The project was informed of the problem early through an issue report but has not responded yet.