Back to Database
Status published
Medium
CVE-2019-18796
The BASS Audio Library 2.4.14 under Windows is prone to...
Vulnerability Description
The BASS Audio Library 2.4.14 under Windows is prone to a BASS_StreamCreateFile Denial of Service vulnerability (infinite loop) via a crafted .mp3 file. This weakness could allow attackers to consume excessive CPU and the application becomes unresponsive.
Impact Analysis
Refer to official advisory for detailed impact metrics.
Remediation
Ensure systems are updated to the latest vendor-supplied patch levels.
THREAT MONITOR
Am I Vulnerable?
Launch our assessment wizard to check if your infrastructure is exposed to • CVE-2019-18796
Credits & Attribution
No credits recorded in the NVD database.
More from un4seen
View All →CVE-2019-19513
The BASSMIDI plugin 2.4.12.1 for Un4seen BASS Audio Library on...
Critical
9.8
CVE-2019-18795
The BASS Audio Library 2.4.14 under Windows is prone to...
Medium
6.5
CVE-2019-18794
The BASS Audio Library 2.4.14 under Windows is prone to...
Medium
6.5
CVE-2006-6063
Stack-based buffer overflow in Un4seen XMPlay 3.3.0.5 and earlier allows...
High
7.5
Affected Vendor
un4seen
View all reports →Affected Software
bass
Vulnerable Versions:
0
Timeline
Official Publish:
October 16th, 2020
Last Modified:
August 5th, 2024
Added to House:
July 20th, 2026
CVSS Vectors
V3:
CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H
Weaknesses (CWE)
No CWE data available
MITRE ATT&CK TTPs
No associated TTPs found for this vulnerability.