Vulnerabilidades

Resumen — últimos 7 días

Vulnerabilidades nuevas2683▼ 54 respecto a la semana anterior

Críticas / altas1442▲ 305 respecto a la semana anterior

Nueva explotación activa (KEV)7▼ 3 respecto a la semana anterior

Sin puntuar (sin CVSS)64▼ 462 respecto a la semana anterior

10 resultados, ordenados por fecha de publicación (más recientes primero)

CVE	Estado	Severidad	EPSS	Explotación activa	Tecnologías afectadas	Publicada ▼	Modificada	Descripción
CVE-2025-14369	Aplazada	Media (5.5)	0.16%	—	DR Libs DR Flac^AI	20/1/2026	17/6/2026	dr_flac, an audio decoder within the dr_libs toolset, contains an integer overflow vulnerability flaw due to trusting the totalPCMFrameCount field from FLAC metadata before calculating buffer size, allowing an attacker with a specially crafted file to perform DoS against programs using the tool.
CVE-2020-22219	Modificada	Alta (7.8)	0.79%	—	Flac Project Flac	22/8/2023	17/6/2026	Buffer Overflow vulnerability in function bitwriter_grow_ in flac before 1.4.0 allows remote attackers to run arbitrary code via crafted input to the encoder.
CVE-2017-6888	Modificada	Media (5.5)	1.3%	—	Flac Project Flac Debian Linux Fedoraproject Fedora	25/4/2018	17/6/2026	An error in the "read_metadata_vorbiscomment_()" function (src/libFLAC/stream_decoder.c) in FLAC version 1.3.2 can be exploited to cause a memory leak via a specially crafted FLAC file.
CVE-2014-9028	Modificada	Alta (7.5)	9.8%	—	Libflac	26/11/2014	17/6/2026	Heap-based buffer overflow in stream_decoder.c in libFLAC before 1.3.1 allows remote attackers to execute arbitrary code via a crafted .flac file.
CVE-2014-8962	Modificada	Alta (7.5)	9.9%	—	Libflac	26/11/2014	17/6/2026	Stack-based buffer overflow in stream_decoder.c in libFLAC before 1.3.1 allows remote attackers to execute arbitrary code via a crafted .flac file.
CVE-2007-6279	Modificada	Alta (9.3)	4.0%	—	Libflac	7/12/2007	16/6/2026	Multiple double free vulnerabilities in Free Lossless Audio Codec (FLAC) libFLAC before 1.2.1 allow user-assisted remote attackers to execute arbitrary code via malformed (1) Seektable values or (2) Seektable Data Offsets in a .FLAC file.
CVE-2007-6278	Modificada	Alta (9.3)	2.1%	—	Libflac	7/12/2007	16/6/2026	Free Lossless Audio Codec (FLAC) libFLAC before 1.2.1 allows user-assisted remote attackers to force a client to download arbitrary files via the MIME-Type URL flag (-->) for the FLAC image file in a crafted .FLAC file.
CVE-2007-6277	Modificada	Alta (9.3)	6.7%	—	Libflac	7/12/2007	16/6/2026	Multiple buffer overflows in Free Lossless Audio Codec (FLAC) libFLAC before 1.2.1 allow user-assisted remote attackers to execute arbitrary code via large (1) Metadata Block Size, (2) VORBIS Comment String Size, (3) Picture Metadata MIME-TYPE Size, (4) Picture Description Size, (5) Picture Data Length, (6) Padding…
CVE-2007-4619	Modificada	Alta (9.3)	6.7%	—	Libflac Nullsoft Winamp	12/10/2007	16/6/2026	Multiple integer overflows in Free Lossless Audio Codec (FLAC) libFLAC before 1.2.1, as used in Winamp before 5.5 and other products, allow user-assisted remote attackers to execute arbitrary code via a malformed FLAC file that triggers improper memory allocation, resulting in a heap-based buffer overflow.
CVE-2007-3507	Modificada	Alta (9.3)	5.5%	—	Flac123	2/7/2007	16/6/2026	Stack-based buffer overflow in the local__vcentry_parse_value function in vorbiscomment.c in flac123 (aka flac-tools or flac) before 0.0.10 allows user-assisted remote attackers to execute arbitrary code via a large comment value_length.