https://db.gcve.eu Contains only the most 10 recent entries. http://www.rssboard.org/rss-specification python-feedgen en Thu, 05 Nov 2026 09:30:40 +0000 https://db.gcve.eu/vuln/fkie_cve-2026-29508 <p>ReadyMedia (formerly MiniDLNA) versions 1.3.0 through 1.3.3 contain a stack-based buffer overflow vulnerability that allows remote attackers to corrupt stack memory by crafting a malicious DFF audio file with an oversized PROP chunk size value that is used unvalidated to allocate a variable-length stack array and read file data into it. Attackers can place a crafted DFF file in a directory monitored by ReadyMedia to trigger automatic parsing via inotify, achieving remote code execution on unprotected builds or denial of service on hardened builds with stack protections.</p> <p>ReadyMedia (formerly MiniDLNA) versions 1.3.0 through 1.3.3 contain a stack-based buffer overflow vulnerability that allows remote attackers to corrupt stack memory by crafting a malicious DFF audio file with an oversized PROP chunk size value that is used unvalidated to allocate a variable-length stack array and read file data into it. Attackers can place a crafted DFF file in a directory monitored by ReadyMedia to trigger automatic parsing via inotify, achieving remote code execution on unprotected builds or denial of service on hardened builds with stack protections.</p> https://db.gcve.eu/vuln/fkie_cve-2026-29508 https://db.gcve.eu/vuln/ghsa-3p4r-mwmm-qcvg <p>ReadyMedia (formerly MiniDLNA) versions 1.3.0 through 1.3.3 contain a stack-based buffer overflow vulnerability that allows remote attackers to corrupt stack memory by crafting a malicious DFF audio file with an oversized PROP chunk size value that is used unvalidated to allocate a variable-length stack array and read file data into it. Attackers can place a crafted DFF file in a directory monitored by ReadyMedia to trigger automatic parsing via inotify, achieving remote code execution on unprotected builds or denial of service on hardened builds with stack protections.</p> <p>ReadyMedia (formerly MiniDLNA) versions 1.3.0 through 1.3.3 contain a stack-based buffer overflow vulnerability that allows remote attackers to corrupt stack memory by crafting a malicious DFF audio file with an oversized PROP chunk size value that is used unvalidated to allocate a variable-length stack array and read file data into it. Attackers can place a crafted DFF file in a directory monitored by ReadyMedia to trigger automatic parsing via inotify, achieving remote code execution on unprotected builds or denial of service on hardened builds with stack protections.</p> https://db.gcve.eu/vuln/ghsa-3p4r-mwmm-qcvg https://db.gcve.eu/vuln/ubuntu-cve-2026-29508 <p><strong>Affected:</strong> Ubuntu:Pro:16.04:LTS: minidlna, Ubuntu:Pro:18.04:LTS: minidlna, Ubuntu:20.04:LTS: minidlna, Ubuntu:22.04:LTS: minidlna, Ubuntu:24.04:LTS: minidlna, Ubuntu:26.10: minidlna, Ubuntu:26.04:LTS: minidlna</p> <p>ReadyMedia (formerly MiniDLNA) versions 1.3.0 through 1.3.3 contain a stack-based buffer overflow vulnerability that allows remote attackers to corrupt stack memory by crafting a malicious DFF audio file with an oversized PROP chunk size value that is used unvalidated to allocate a variable-length stack array and read file data into it. Attackers can place a crafted DFF file in a directory monitored by ReadyMedia to trigger automatic parsing via inotify, achieving remote code execution on unprotected builds or denial of service on hardened builds with stack protections.</p> <p><strong>Affected:</strong> Ubuntu:Pro:16.04:LTS: minidlna, Ubuntu:Pro:18.04:LTS: minidlna, Ubuntu:20.04:LTS: minidlna, Ubuntu:22.04:LTS: minidlna, Ubuntu:24.04:LTS: minidlna, Ubuntu:26.10: minidlna, Ubuntu:26.04:LTS: minidlna</p> <p>ReadyMedia (formerly MiniDLNA) versions 1.3.0 through 1.3.3 contain a stack-based buffer overflow vulnerability that allows remote attackers to corrupt stack memory by crafting a malicious DFF audio file with an oversized PROP chunk size value that is used unvalidated to allocate a variable-length stack array and read file data into it. Attackers can place a crafted DFF file in a directory monitored by ReadyMedia to trigger automatic parsing via inotify, achieving remote code execution on unprotected builds or denial of service on hardened builds with stack protections.</p> https://db.gcve.eu/vuln/ubuntu-cve-2026-29508