libsndfile project libsndfile 1.0.28 vulnerabilities and exploits

(subscribe to this query)

4.3

CVSSv2

An issue has been found in libsndfile 1.0.28. There is a memory leak in psf_allocate in common.c, as demonstrated by sndfile-convert. NOTE: The maintainer and third parties were unable to reproduce and closed the issue

Libsndfile Project Libsndfile 1.0.28

6.8

CVSSv2

In libsndfile version 1.0.28, an error in the "aiff_read_chanmap()" function (aiff.c) can be exploited to cause an out-of-bounds read memory access via a specially crafted AIFF file.

Libsndfile Project Libsndfile 1.0.28

7.5

CVSSv2

Heap-based Buffer Overflow in the psf_binheader_writef function in common.c in libsndfile up to and including 1.0.28 allows remote malicious users to cause a denial of service (application crash) or possibly have unspecified other impact.

Libsndfile Project Libsndfile 1.0.28 Debian Debian Linux 9.0

4.3

CVSSv2

The flac_buffer_copy function in flac.c in libsndfile 1.0.28 allows remote malicious users to cause a denial of service (invalid read and application crash) via a crafted audio file.

Libsndfile Project Libsndfile 1.0.28 Debian Debian Linux 8.0

4.3

CVSSv2

The flac_buffer_copy function in flac.c in libsndfile 1.0.28 allows remote malicious users to cause a denial of service (heap-based buffer over-read and application crash) via a crafted audio file.

Libsndfile Project Libsndfile 1.0.28 Debian Debian Linux 8.0

5.8

CVSSv2

An issue exists in libsndfile 1.0.28. There is a buffer over-read in the function i2alaw_array in alaw.c that will lead to a denial of service.

Libsndfile Project Libsndfile 1.0.28 Debian Debian Linux 8.0

6.8

CVSSv2

A stack-based buffer overflow in psf_memset in common.c in libsndfile 1.0.28 allows remote malicious users to cause a denial of service (application crash) or possibly have unspecified other impact via a crafted audio file. The vulnerability can be triggered by the executable snd...

Libsndfile Project Libsndfile 1.0.28 Debian Debian Linux 8.0

5.8

CVSSv2

An out of bounds read in the function d2alaw_array() in alaw.c of libsndfile 1.0.28 may lead to a remote DoS attack or information disclosure, related to mishandling of the NAN and INFINITY floating-point values.

Libsndfile Project Libsndfile 1.0.28 Debian Debian Linux 8.0

5.8

CVSSv2

An out of bounds read in the function d2ulaw_array() in ulaw.c of libsndfile 1.0.28 may lead to a remote DoS attack or information disclosure, related to mishandling of the NAN and INFINITY floating-point values.

Libsndfile Project Libsndfile 1.0.28 Debian Debian Linux 8.0

4.3

CVSSv2

There is a heap-based buffer over-read at wav.c in wav_write_header in libsndfile 1.0.28 that will cause a denial of service.

Libsndfile Project Libsndfile 1.0.28 Debian Debian Linux 8.0

Get Started

1 2 3 NEXT »

Vulmon Search is a vulnerability search engine. It gives comprehensive vulnerability information through a very simple user interface.

Home Recent Vulnerabilities Research Posts Trends Blog About Contact

Vulmon Search Vulmon Research Vulmon Alerts Vulmap

Twitter Reddit Linkedin Facebook