GCVE - cpe:2.3:a:stsaz:phiola:2.0:rc22:*:*:*:*:*:*

Approved changes feed: RSS · Atom

cpe:2.3:a:stsaz:phiola:2.0:rc22:*:*:*:*:*:*

part: a version: 2.0 update: rc22

Vendor	Stsaz (`5e3ee687-db48-5a6f-9afe-a012779d1522`)
Product	Phiola (`5fd7ecf7-0e32-5472-bd35-101bf25314fa`)
Edition	*
Language	*
Software edition	*
Target software	*
Target hardware	*
Other	*

Notes

Imported from purl2cpe mapping

PURL mappings

PURL	Source	Last updated
`pkg:github/stsaz/phiola`	purl2cpe	2026-11-03 09:58:29.633213

Vulnerability references

Identifier	cpeApplicability	Submitted	db.gcve.eu details	Rationale
`CVE:CVE-2024-33431`	vulnerable	2026-06-08 06:37:31.132695	Details available An issue in phiola/src/afilter/conv.c:115 of phiola v2.0-rc22 allows a remote attacker to cause a denial of service via a crafted .wav file. Published: 2024-05-01T00:00:00.000Z Updated: 2024-08-02T02:27:53.639Z Open on db.gcve.eu Reference links https://github.com/stsaz/phiola/ https://github.com/Helson-S/FuzzyTesting/tree/master/phiola/flowPointException-1 https://github.com/Helson-S/FuzzyTesting/blob/master/phiola/flowPointException-1/flowPointException-1.md https://github.com/Helson-S/FuzzyTesting/tree/master/phiola/flowPointException-1/poc https://github.com/Helson-S/FuzzyTesting/blob/master/phiola/flowPointException-1/poc/I0I72U~G	Imported from gcve-enriched-dumps CVE data
`CVE:CVE-2024-33430`	vulnerable	2026-06-08 06:37:31.132041	Details available An issue in phiola/src/afilter/pcm_convert.h:513 of phiola v2.0-rc22 allows a remote attacker to execute arbitrary code via the a crafted .wav file. Published: 2024-05-01T00:00:00.000Z Updated: 2024-08-02T02:27:53.691Z Open on db.gcve.eu Reference links https://github.com/stsaz/phiola/ https://github.com/stsaz/phiola/issues/28 https://github.com/Helson-S/FuzzyTesting/tree/master/phiola/segmentFault-1 https://github.com/Helson-S/FuzzyTesting/tree/master/phiola/segmentFault-1/poc https://github.com/Helson-S/FuzzyTesting/blob/master/phiola/segmentFault-1/poc/I2ZFI3~5	Imported from gcve-enriched-dumps CVE data
`CVE:CVE-2024-33429`	vulnerable	2026-06-08 06:37:31.131423	Details available Buffer-Overflow vulnerability at pcm_convert.h:513 of phiola v2.0-rc22 allows a remote attacker to execute arbitrary code via a crafted .wav file. Published: 2024-05-01T00:00:00.000Z Updated: 2024-08-02T02:27:53.639Z Open on db.gcve.eu Reference links https://github.com/stsaz/phiola/ https://github.com/stsaz/phiola/issues/30 https://github.com/Helson-S/FuzzyTesting/tree/master/phiola/heap-buffer-overflow-2 https://github.com/Helson-S/FuzzyTesting/blob/master/phiola/heap-buffer-overflow-2/heap-buffer-overflow-2.md https://github.com/Helson-S/FuzzyTesting/blob/master/phiola/heap-buffer-overflow-2/poc/	Imported from gcve-enriched-dumps CVE data
`CVE:CVE-2024-33428`	vulnerable	2026-06-08 06:37:31.129840	Details available Buffer-Overflow vulnerability at conv.c:68 of stsaz phiola v2.0-rc22 allows a remote attacker to execute arbitrary code via the a crafted .wav file. Published: 2024-05-01T00:00:00.000Z Updated: 2024-09-06T18:42:33.732Z Open on db.gcve.eu Reference links https://github.com/stsaz/phiola/issues/29 https://github.com/Helson-S/FuzzyTesting/tree/master/phiola/heap-buffer-overflow-1 https://github.com/Helson-S/FuzzyTesting/blob/master/phiola/heap-buffer-overflow-1/heap-buffer-overflow-1.md https://github.com/Helson-S/FuzzyTesting/blob/master/phiola/heap-buffer-overflow-1/poc https://github.com/Helson-S/FuzzyTesting/blob/master/phiola/heap-buffer-overflow-1/heap-buffer-overflow-1.assets/image-20240420005017430.png	Imported from gcve-enriched-dumps CVE data

Contribute

You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.

stsaz phiola 2.0 Release Candidate 22

Notes

PURL mappings

Vulnerability references

Contribute