Known vulnerabilities in SoundTouch
Vendor:
Bose Corporation
Software:
SoundTouch
Software CPE:
cpe:2.3:h:bose_corporation:soundtouch:*:*:*:*:*:*:*:*
Website:
https://global.bose.com
Total vulnerabilities:
7
Public exploits:
3
Known exploited (KEV):
0
Highest CVSSv4 Score:
8.8
Breakdown by Severity Chart
Vulnerabilities (7)
| Vulnerability | CWE-ID | CSH Severity | Public Exploit | KEV | First fixed release | Published | Bulletins |
|---|---|---|---|---|---|---|---|
| #VU36054 - Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') CVE-2018-12638 |
CWE-79 | Low | - | 21.03.2019 |
SB2019032133 |
||
| #VU15361 - Heap-based Buffer Overflow CVE-2018-1000223 |
CWE-122 | High | 2.1 | 12.10.2018 |
SB2018101501 SB2018101504 SB2018111905 and 2 more |
||
| #VU36904 - Reachable Assertion CVE-2018-14044 |
CWE-617 | Medium | - | 13.07.2018 |
SB2018071313 SB2018081452 SB2018081453 |
||
| #VU36905 - Reachable Assertion CVE-2018-14045 |
CWE-617 | Medium | - | 13.07.2018 |
SB2018071313 SB2018081452 SB2018081453 |
||
| #VU38638 - Loop with Unreachable Exit Condition ('Infinite Loop') CVE-2017-9258 |
CWE-835 | Medium | - | 27.07.2017 |
SB2017072714 SB2018070513 SB2018070514 |
||
| #VU38639 - Resource exhaustion CVE-2017-9259 |
CWE-400 | Medium | - | 27.07.2017 |
SB2017072714 SB2018070513 SB2018070514 |
||
| #VU38640 - Out-of-bounds read CVE-2017-9260 |
CWE-125 | Medium | - | 27.07.2017 |
SB2017072714 SB2018070513 SB2018070514 |