Search vulnerabilities

Use the Query Builder to create your own search query, or check out the documentation to learn the search syntax.

Results 34

Export CSV
CVE-2014-9756

libsndfile: division by zero leading to denial of service in psf_fwrite()

The psf_fwrite function in file_io.c in libsndfile allows attackers to cause a denial of service (divide-by-zero error and application crash) via unspecified vectors related to the headindex variable.

CVSS 2.0 · 5.0 Medium EPSS 2.8% KEV · Not listed
Vendors
Canonical Libsndfile Project Opensuse
Products
Ubuntu Linux Libsndfile Leap and 1 more
CVE-2014-9496

libsndfile: 2 buffer overruns in sd2_parse_rsrc_fork()

The sd2_parse_rsrc_fork function in sd2.c in libsndfile allows attackers to have unspecified impact via vectors related to a (1) map offset or (2) rsrc marker, which triggers an out-of-bounds read.

CVSS 2.0 · 2.1 Low EPSS < 1% KEV · Not listed
Vendors
Canonical Debian Libsndfile Project and 2 more
Products
Ubuntu Linux Debian Linux Libsndfile and 2 more
CVE-2022-33065

libsndfile: integer overflow in src/mat4.c and src/au.c leads to DoS

Multiple signed integers overflow in function au_read_header in src/au.c and in functions mat4_open and mat4_read_header in src/mat4.c in Libsndfile, allows an attacker to cause Denial of Service or other unspecified impacts.

CVSS 3.1 · 7.8 High EPSS < 1% KEV · Not listed
Vendors
Libsndfile Project Redhat
Products
Libsndfile Enterprise Linux
CVE-2022-33064

libsndfile: off-by-one error in function wav_read_header in src/wav.c leads to code execution

An off-by-one error in function wav_read_header in src/wav.c in Libsndfile 1.1.0, results in a write out of bound, which allows an attacker to execute arbitrary code, Denial of Service or other unspecified impacts.

CVSS 3.1 · 7.8 High EPSS < 1% KEV · Not listed
Vendors
Libsndfile Project
Products
Libsndfile
CVE-2019-3832

libsndfile: incomplete fix for CVE-2018-19758 still allow to read beyond buffer limits

It was discovered the fix for CVE-2018-19758 (libsndfile) was not complete and still allows a read beyond the limits of a buffer in wav_write_header() function in wav.c. A local attacker may use this flaw to make the application crash.

CVSS 3.1 · 5.5 Medium EPSS < 1% KEV · Not listed
Vendors
Canonical Debian Libsndfile Project
Products
Ubuntu Linux Debian Linux Libsndfile
CVE-2018-19758

libsndfile: heap-based buffer over-read at wav.c in wav_write_header

There is a heap-based buffer over-read at wav.c in wav_write_header in libsndfile 1.0.28 that will cause a denial of service.

CVSS 3.0 · 6.5 Medium EPSS 1.7% KEV · Not listed
Vendors
Debian Libsndfile Project
Products
Debian Linux Libsndfile
CVE-2018-19661

libsndfile: buffer over-read in the function i2ulaw_array in ulaw.c

An issue was discovered in libsndfile 1.0.28. There is a buffer over-read in the function i2ulaw_array in ulaw.c that will lead to a denial of service.

CVSS 3.0 · 6.5 Medium EPSS 2.1% KEV · Not listed
Vendors
Debian Libsndfile Project
Products
Debian Linux Libsndfile
CVE-2018-19432

libsndfile: OOB read in sf_write_int in sndfile.c

An issue was discovered in libsndfile 1.0.28. There is a NULL pointer dereference in the function sf_write_int in sndfile.c, which will lead to a denial of service.

CVSS 3.0 · 6.5 Medium EPSS 3.0% KEV · Not listed
Vendors
Debian Libsndfile Project
Products
Debian Linux Libsndfile
CVE-2018-13419

libsndfile: Memory leak in common.c:psf_allocate()

An issue has been found in libsndfile 1.0.28. There is a memory leak in psf_allocate in common.c, as demonstrated by sndfile-convert. NOTE: The maintainer and third parties were unable to reproduce and closed the issue

CVSS 3.0 · 6.5 Medium EPSS 1.2% KEV · Not listed
Vendors
Libsndfile Project
Products
Libsndfile
CVE-2018-13139

libsndfile: stack-based buffer overflow in sndfile-deinterleave utility

A stack-based buffer overflow in psf_memset in common.c in libsndfile 1.0.28 allows remote attackers to cause a denial of service (application crash) or possibly have unspecified other impact via a crafted audio file. The vulnerability can be triggered by the executable sndfile-deinterleave.

CVSS 3.0 · 8.8 High EPSS 3.4% KEV · Not listed
Vendors
Debian Libsndfile Project Redhat
Products
Debian Linux Libsndfile Enterprise Linux
CVE-2024-50613

libsndfile: Reachable assertion in mpeg_l3_encoder_close

libsndfile through 1.2.2 has a reachable assertion, that may lead to application exit, in mpeg_l3_encode.c mpeg_l3_encoder_close.

CVSS 3.1 · 6.5 Medium EPSS < 1% KEV · Not listed
Vendors
Libsndfile Project
Products
Libsndfile