bass vulnerabilities and fixes

Recent CVEs affecting bass, with upgrade or downgrade steps. 3 tracked.

bass has 3 tracked vulnerabilities, 0 critical. A fixed release or vendor patch exists for 3. Most recent: 2020-10-16. Highest priority: CVE-2019-18795 (score 40/100).

• CVE-2019-18796 MEDIUM 6.5 UPGRADE The BASS Audio Library 2.4.14 under Windows is prone to a BASS_StreamCreateFile Denial of Service vulnerabilit
• CVE-2019-18795 MEDIUM 6.5 UPGRADE The BASS Audio Library 2.4.14 under Windows is prone to a BASS_StreamCreateFile out of bounds read vulnerabili
• CVE-2019-18794 MEDIUM 6.5 UPGRADE The BASS Audio Library 2.4.14 under Windows is prone to a BASS_StreamCreateFile Use after Free vulnerability v

FAQ

How do I fix bass vulnerabilities?

Open the CVE for your version, check the affected range, then follow the listed action: upgrade to the fixed release, or downgrade or mitigate if no fix exists yet. Commands for each OS are shown on every CVE page.

Is bass being exploited right now?

None of the tracked bass CVEs are on the CISA Known Exploited Vulnerabilities list at the moment. This is checked every 20 minutes.

Which bass CVE should I patch first?

CVE-2019-18795 currently ranks highest (40/100): The BASS Audio Library 2.4.14 under Windows is prone to a BASS_StreamCreateFile out of bounds read vulnerabili.

RSS feed for bass · ← Back to latest CVEs