The audiofile Audio File Library 0.3.6 has a NULL pointer dereference bug in ModuleState::setup in modules/ModuleState.cpp, which allows an malicious user to cause a denial of service via a crafted caf file, as demonstrated by sfconvert.
Vulnerable Product | Search on Vulmon | Subscribe to Product |
---|---|---|
audio file library project audio file library 0.3.6 |
||
canonical ubuntu linux 14.04 |