Home
Trends
Vulnerabilities
News
Researchers
Why dbugs?

Elmanto

#15676of 53,624
17.3Total CVSS
Vulnerabilities · 2
High
1
Critical
1
PT-2022-11470
9.8
2022-03-22
Faust · Faust · CVE-2021-41736
**Name of the Vulnerable Software and Affected Versions** Faust version 2.35.0 **Description** A heap-buffer overflow was discovered in the function `realPropagate()` at `propagate.cpp`. **Recommendations** For version 2.35.0, consider disabling the `realPropagate()` function as a temporary workaround until a patch is available.
PT-2021-23389
7.5
2021-12-31
Faust · Faust · CVE-2021-41737
**Name of the Vulnerable Software and Affected Versions** Faust version 2.23.1 **Description** The issue arises when an input file contains specific lines, including "// r visualisation tCst", "//process = +: L: abM-^Q;", and "process = route(3333333333333333333,2,1,2,3,1) : *;", leading to stack consumption. This poses a high risk and has been exploited in specific versions. **Recommendations** For Faust version 2.23.1, update to the latest version available to mitigate the risk of stack consumption due to the vulnerable input file processing.