CVE-2019-18795

The BASS Audio Library 2.4.14 under Windows is prone to a BASS_StreamCreateFile out of bounds read vulnerability via a crafted .wav file. An attacker can exploit this issues to gain access to sensitive information that may aid in further attacks. A failure in exploitation leads to denial of service.

• CWE-125

• http://www.un4seen.com/Vendor Advisory
• https://github.com/staufnic/CVE/tree/master/CVE-2019-18795Third Party Advisory
• http://www.un4seen.com/Vendor Advisory
• https://github.com/staufnic/CVE/tree/master/CVE-2019-18795Third Party Advisory

Published

Oct 16, 2020

Last Modified

Jun 17, 2026

Status

Modified

• How Strix found a critical auth bypass in etcdStrix autonomously discovered a critical authentication bypass in etcd, later designated CVE-2026-33413.
• Autonomous PentestingAI agents that find and validate exploitable vulnerabilities like this one across your applications.
• PR ReviewsPentest every pull request so vulnerable code is caught before it ships to production.
• AI Penetration TestingHow AI-driven penetration testing continuously covers your attack surface.

• CVE-2019-1879A vulnerability in the CLI of Cisco Integrated Management Co…6.4
• CVE-2019-18790An issue was discovered in channels/chan_sip.c in Sangoma As…6.5
• CVE-2019-18791Lexmark printer MS812 and multiple older generation Lexmark …5.4
• CVE-2019-18792An issue was discovered in Suricata 5.0.0. It is possible to…9.1
• CVE-2019-18793Parallels Plesk Panel 9.5 allows XSS in target/locales/tr-TR…6.1
• CVE-2019-18794The BASS Audio Library 2.4.14 under Windows is prone to a BA…6.5
• CVE-2019-18796The BASS Audio Library 2.4.14 under Windows is prone to a BA…6.5
• CVE-2019-18797LibSass 3.6.1 has uncontrolled recursion in Sass::Eval::oper…6.5
• CVE-2019-18798LibSass before 3.6.3 allows a heap-based buffer over-read in…6.5
• CVE-2019-18799LibSass before 3.6.3 allows a NULL pointer dereference in Sa…6.5
• CVE-2019-1880A vulnerability in the BIOS upgrade utility of Cisco Unified…4.4
• CVE-2019-18800Viber through 11.7.0.5 allows a remote attacker who can capt…8.8