CVE-2019-18796

Published October 16th, 2020

View on NVD ↗

CVSS v3

6.5

MEDIUM

CVSS v2

7.1

HIGH

Affected

PROJECT

Description

The BASS Audio Library 2.4.14 under Windows is prone to a BASS_StreamCreateFile Denial of Service vulnerability (infinite loop) via a crafted .mp3 file. This weakness could allow attackers to consume excessive CPU and the application becomes unresponsive.

staufnic/CVE

GitHub