https://patchthecve.com/CVEs with upgrade or downgrade fix stepshttps://patchthecve.com/cve/CVE-2019-18796.htmlhttps://patchthecve.com/cve/CVE-2019-18796.htmlWed, 17 Jun 2026 02:25:21 +0000MEDIUM 6.5: The BASS Audio Library 2.4.14 under Windows is prone to a BASS_StreamCreateFile Denial of Service vulnerability (infinite loop) via a crafted .mp3 file. This weakness could allow attackers to consume excessive CPU and the application becomes unresponsive.https://patchthecve.com/cve/CVE-2019-18795.htmlhttps://patchthecve.com/cve/CVE-2019-18795.htmlWed, 17 Jun 2026 02:25:20 +0000MEDIUM 6.5: The BASS Audio Library 2.4.14 under Windows is prone to a BASS_StreamCreateFile out of bounds read vulnerability via a crafted .wav file. An attacker can exploit this issues to gain access to sensitive information that may aid in further attacks. A failure in exploitation leads to denial of service.https://patchthecve.com/cve/CVE-2019-18794.htmlhttps://patchthecve.com/cve/CVE-2019-18794.htmlWed, 17 Jun 2026 02:25:20 +0000MEDIUM 6.5: The BASS Audio Library 2.4.14 under Windows is prone to a BASS_StreamCreateFile Use after Free vulnerability via a crafted .ogg file. An attacker can exploit this to gain access to sensitive information that may aid in further attacks. A failure in exploitation leads to denial of service.