Gracenote develops media and entertainment software including its GNSDK toolkit, CDDB metadata service, and related components that power music and entertainment applications across consumer and enterprise platforms. The observed vulnerability surface clusters around boundary-condition and indexing weaknesses affecting its control and daemon components, which are characteristic of systems handling structured data and active content.
The number and severity of CVEs published that impact products developed by Gracenote over time
Signals from CVEs in this vendor scope (4 CVEs).
4 CVEs · Highest risk first
| CVE | Published | CVSS | Risk | KEV | Exploit |
|---|---|---|---|---|---|
CVE-2015-2004CRITICAL The GraceNote GNSDK SDK before SVN Changeset 1.1.7 for Android might allow attackers to execute arbitrary code by leveraging a finalize method in a Serializable class that improper | Mar 29, 2018 | 9.8 | 31 | NO | NO |
CVE-2006-3134HIGH Buffer overflow in GraceNote CDDBControl ActiveX Control, as used by multiple products that use Gracenote CDDB, allows remote attackers to execute arbitrary code via a long option | Jun 27, 2006 | 9.3 | 27 | NO | NO |
CVE-2007-0443HIGH Multiple buffer overflows in the CDDBControl ActiveX control in Gracenote CDDB before 20070418 allow remote attackers to execute arbitrary code via long values for certain Proxy co | Apr 24, 2007 | 9.3 | 25 | NO | NO |
CVE-1999-1240HIGH Buffer overflow in cddbd CD database server allows remote attackers to execute arbitrary commands via a long log message. | Nov 26, 1996 | 7.5 | 20 | NO | NO |
Signals from CVEs in this vendor scope (4 CVEs).
An overview of all social media posts that mention a CVE ID that affects a product developed by Gracenote.
Media articles that mention a CVE ID that affects a product developed by Gracenote — matched by CVE ID, not by vendor name.