PatchTheCVEsoundtouch vulnerabilities and fixes
Recent CVEs affecting soundtouch, with upgrade or downgrade steps. 13 tracked.
soundtouch has 13 tracked vulnerabilities, 0 critical. A fixed release or vendor patch exists for 1. Most recent: 2019-03-21. Highest priority: CVE-2018-17098 (score 57/100).
- CVE-2018-17098 HIGH 8.8 DOWNGRADE The WavFileBase class in WavFile.cpp in Olli Parviainen SoundTouch 2.0 allows remote attackers to cause a deni
- CVE-2018-17097 HIGH 8.8 DOWNGRADE The WavFileBase class in WavFile.cpp in Olli Parviainen SoundTouch 2.0 allows remote attackers to cause a deni
- CVE-2018-17096 MEDIUM 6.5 DOWNGRADE The BPMDetect class in BPMDetect.cpp in libSoundTouch.a in Olli Parviainen SoundTouch 2.0 allows remote attack
- CVE-2018-14045 HIGH 7.5 DOWNGRADE The FIRFilter::evaluateFilterMulti function in FIRFilter.cpp in libSoundTouch.a in Olli Parviainen SoundTouch
- CVE-2018-14044 HIGH 7.5 DOWNGRADE The RateTransposer::setChannels function in RateTransposer.cpp in libSoundTouch.a in Olli Parviainen SoundTouc
- CVE-2018-12638 MEDIUM 6.1 DOWNGRADE An issue was discovered in the Bose Soundtouch app 18.1.4 for iOS
- CVE-2018-1000223 HIGH 8.8 UPGRADE soundtouch version up to and including 2.0.0 contains a Buffer Overflow vulnerability in SoundStretch/WavFile.
- CVE-2017-9260 MEDIUM 5.5 DOWNGRADE The TDStretchSSE::calcCrossCorr function in source/SoundTouch/sse_optimized.cpp in SoundTouch 1.9.2 allows rem
- CVE-2017-9259 MEDIUM 5.5 DOWNGRADE The TDStretch::acceptNewOverlapLength function in source/SoundTouch/TDStretch.cpp in SoundTouch 1.9.2 allows r
- CVE-2017-9258 MEDIUM 5.5 DOWNGRADE The TDStretch::processSamples function in source/SoundTouch/TDStretch.cpp in SoundTouch 1.9.2 allows remote at
- CVE-2017-17751 HIGH 8.8 MITIGATE MITIGATE Bose SoundTouch devices allows remote attackers to achieve remote control via a crafted web site that uses the
- CVE-2017-17750 MEDIUM 5.4 MITIGATE MITIGATE Bose SoundTouch devices allow XSS via a crafted public playlist from Spotify.
- CVE-2017-17749 MEDIUM 5.4 MITIGATE MITIGATE Bose SoundTouch devices allow XSS via crafted song data from a music service, as demonstrated by Pandora.
FAQ
How do I fix soundtouch vulnerabilities?
Open the CVE for your version, check the affected range, then follow the listed action: upgrade to the fixed release, or downgrade or mitigate if no fix exists yet. Commands for each OS are shown on every CVE page.
Is soundtouch being exploited right now?
None of the tracked soundtouch CVEs are on the CISA Known Exploited Vulnerabilities list at the moment. This is checked every 20 minutes.
Which soundtouch CVE should I patch first?
CVE-2018-17098 currently ranks highest (57/100): The WavFileBase class in WavFile.cpp in Olli Parviainen SoundTouch 2.0 allows remote attackers to cause a deni.