Heap-based buffer overflow in libsndfile 1.0.25 allows remote attackers to have unspecified impact via the headindex value in the header in an AIFF file. Rated critical severity (CVSS 9.3), this vulnerability is remotely exploitable. Public exploit code available and EPSS exploitation probability 58.5%.
Buffer Overflow
Opensuse
Libsndfile
NVD
Exploit-DB
CVSS 2.0
9.3
EPSS
58.5%
Threat
5.1
Integer overflow in Google Picasa before 3.9.140 Build 259 allows remote attackers to execute arbitrary code via the CAMF section in a FOVb image, which triggers a heap-based buffer overflow. Rated critical severity (CVSS 10.0), this vulnerability is remotely exploitable, low attack complexity. Epss exploitation probability 24.9% and no vendor patch available.
RCE
Google
Buffer Overflow
Picasa
NVD
CVSS 2.0
10.0
EPSS
24.9%