https://cve.radiocsirt.org Contains only the most 10 recent entries. http://www.rssboard.org/rss-specification python-feedgen en Sat, 03 Oct 2026 22:46:27 +0000 https://cve.radiocsirt.org/vuln/euvd-2026-341784 EUVD-2026-341784 https://cve.radiocsirt.org/vuln/euvd-2026-341784 https://cve.radiocsirt.org/vuln/fkie_cve-2026-49127 <p>Music Player Daemon (MPD) before version 0.24.11 contains a stack buffer overflow vulnerability in the pcm_unpack_24be function in src/pcm/Pack.cxx that allows unauthenticated attackers to corrupt stack memory by triggering an off-by-one write in the PCM decoder plugin. Attackers can issue two MPD commands referencing a malicious HTTP audio source to cause the unpack loop to write 1366 entries into a 1365-entry buffer, overwriting four bytes past the array boundary with three attacker-controlled bytes from an HTTP response body, resulting in daemon termination or potential code execution.</p> <p>Music Player Daemon (MPD) before version 0.24.11 contains a stack buffer overflow vulnerability in the pcm_unpack_24be function in src/pcm/Pack.cxx that allows unauthenticated attackers to corrupt stack memory by triggering an off-by-one write in the PCM decoder plugin. Attackers can issue two MPD commands referencing a malicious HTTP audio source to cause the unpack loop to write 1366 entries into a 1365-entry buffer, overwriting four bytes past the array boundary with three attacker-controlled bytes from an HTTP response body, resulting in daemon termination or potential code execution.</p> https://cve.radiocsirt.org/vuln/fkie_cve-2026-49127 https://cve.radiocsirt.org/vuln/ghsa-p9r5-qpp4-rjg3 <p>Music Player Daemon (MPD) before version 0.24.11 contains a stack buffer overflow vulnerability in the pcm_unpack_24be function in src/pcm/Pack.cxx that allows unauthenticated attackers to corrupt stack memory by triggering an off-by-one write in the PCM decoder plugin. Attackers can issue two MPD commands referencing a malicious HTTP audio source to cause the unpack loop to write 1366 entries into a 1365-entry buffer, overwriting four bytes past the array boundary with three attacker-controlled bytes from an HTTP response body, resulting in daemon termination or potential code execution.</p> <p>Music Player Daemon (MPD) before version 0.24.11 contains a stack buffer overflow vulnerability in the pcm_unpack_24be function in src/pcm/Pack.cxx that allows unauthenticated attackers to corrupt stack memory by triggering an off-by-one write in the PCM decoder plugin. Attackers can issue two MPD commands referencing a malicious HTTP audio source to cause the unpack loop to write 1366 entries into a 1365-entry buffer, overwriting four bytes past the array boundary with three attacker-controlled bytes from an HTTP response body, resulting in daemon termination or potential code execution.</p> https://cve.radiocsirt.org/vuln/ghsa-p9r5-qpp4-rjg3 https://cve.radiocsirt.org/vuln/ubuntu-cve-2026-49127 <p><strong>Affected:</strong> Ubuntu:16.04:LTS: mpd, Ubuntu:18.04:LTS: mpd, Ubuntu:20.04:LTS: mpd, Ubuntu:22.04:LTS: mpd, Ubuntu:24.04:LTS: mpd, Ubuntu:25.10: mpd, Ubuntu:26.04:LTS: mpd</p> <p>Music Player Daemon (MPD) before version 0.24.11 contains a stack buffer overflow vulnerability in the pcm_unpack_24be function in src/pcm/Pack.cxx that allows unauthenticated attackers to corrupt stack memory by triggering an off-by-one write in the PCM decoder plugin. Attackers can issue two MPD commands referencing a malicious HTTP audio source to cause the unpack loop to write 1366 entries into a 1365-entry buffer, overwriting four bytes past the array boundary with three attacker-controlled bytes from an HTTP response body, resulting in daemon termination or potential code execution.</p> <p><strong>Affected:</strong> Ubuntu:16.04:LTS: mpd, Ubuntu:18.04:LTS: mpd, Ubuntu:20.04:LTS: mpd, Ubuntu:22.04:LTS: mpd, Ubuntu:24.04:LTS: mpd, Ubuntu:25.10: mpd, Ubuntu:26.04:LTS: mpd</p> <p>Music Player Daemon (MPD) before version 0.24.11 contains a stack buffer overflow vulnerability in the pcm_unpack_24be function in src/pcm/Pack.cxx that allows unauthenticated attackers to corrupt stack memory by triggering an off-by-one write in the PCM decoder plugin. Attackers can issue two MPD commands referencing a malicious HTTP audio source to cause the unpack loop to write 1366 entries into a 1365-entry buffer, overwriting four bytes past the array boundary with three attacker-controlled bytes from an HTTP response body, resulting in daemon termination or potential code execution.</p> https://cve.radiocsirt.org/vuln/ubuntu-cve-2026-49127