Search vulnerabilities

Use the Query Builder to create your own search query, or check out the documentation to learn the search syntax.

Results 20

Export CSV
CVE-2022-24599

audiofile: memory leak in printinfo.c

In autofile Audio File Library 0.3.6, there exists one memory leak vulnerability in printfileinfo, in printinfo.c, which allows an attacker to leak sensitive information via a crafted file. The printfileinfo function calls the copyrightstring function to get data, however, it dosn't use zero bytes to truncate the data.

CVSS 3.1 · 6.5 Medium EPSS 1.7% KEV · Not listed
Vendors
Audiofile Debian Fedoraproject
Products
Audiofile Debian Linux Fedora
CVE-2019-13147

audiofile: a NULL pointer dereference in ulaw2linear_buf in G711.cpp in libmodules.a leading to DoS

In Audio File Library (aka audiofile) 0.3.6, there exists one NULL pointer dereference bug in ulaw2linear_buf in G711.cpp in libmodules.a that allows an attacker to cause a denial of service via a crafted file.

CVSS 3.1 · 6.5 Medium EPSS 1.9% KEV · Not listed
Vendors
Audiofile Debian
Products
Audiofile Debian Linux
CVE-2025-50950

audiofile: NULL pointer dereference in the ModuleState::setup function

Audiofile v0.3.7 was discovered to contain a NULL pointer dereference via the ModuleState::setup function.

CVSS 3.1 · 7.5 High EPSS < 1% KEV · Not listed
Vendors
Audiofile
Products
Audiofile
CVE-2015-7747

audiofile: Buffer overflow when changing number of channels and sample format

Buffer overflow in the afReadFrames function in audiofile (aka libaudiofile and Audio File Library) allows user-assisted remote attackers to cause a denial of service (program crash) or possibly execute arbitrary code via a crafted audio file, as demonstrated by sixteen-stereo-to-eight-mono.c.

CVSS 3.1 · 8.8 High EPSS 8.8% KEV · Not listed
Vendors
Audiofile Canonical Fedoraproject
Products
Audiofile Ubuntu Linux Fedora
CVE-2018-17095

audiofile: Heap-based buffer overflow in Expand3To4Module::run() when running sfconvert

An issue has been discovered in mpruett Audio File Library (aka audiofile) 0.3.6, 0.3.5, 0.3.4, 0.3.3, 0.3.2, 0.3.1, 0.3.0. A heap-based buffer overflow in Expand3To4Module::run has occurred when running sfconvert.

CVSS 3.1 · 8.8 High EPSS 4.7% KEV · Not listed
Vendors
Audiofile Canonical Redhat
Products
Audiofile Ubuntu Linux Enterprise Linux
CVE-2018-13440

audiofile: NULL pointer dereference in ModuleState::setup() in modules/ModuleState.cpp allows for denial of service via crafted file

The audiofile Audio File Library 0.3.6 has a NULL pointer dereference bug in ModuleState::setup in modules/ModuleState.cpp, which allows an attacker to cause a denial of service via a crafted caf file, as demonstrated by sfconvert.

CVSS 3.0 · 6.5 Medium EPSS 3.1% KEV · Not listed
Vendors
Audiofile Canonical Redhat
Products
Audiofile Ubuntu Linux Enterprise Linux
CVE-2017-6831

audiofile: Heap-based buffer overflow in IMA::decodeBlockWAVE

Heap-based buffer overflow in the decodeBlockWAVE function in IMA.cpp in Audio File Library (aka audiofile) 0.3.6, 0.3.5, 0.3.4, 0.3.3, 0.3.2, 0.3.1, 0.3.0 and 0.2.7 allows remote attackers to cause a denial of service (crash) via a crafted file.

CVSS 3.1 · 5.5 Medium EPSS 3.1% KEV · Not listed
Vendors
Audiofile Debian
Products
Audiofile Debian Linux
CVE-2017-6833

audiofile: Divide-by-zero in BlockCodec::runPull

The runPull function in libaudiofile/modules/BlockCodec.cpp in Audio File Library (aka audiofile) 0.3.6 allows remote attackers to cause a denial of service (divide-by-zero error and crash) via a crafted file.

CVSS 3.0 · 5.5 Medium EPSS 2.8% KEV · Not listed
Vendors
Audiofile
Products
Audiofile
CVE-2017-6834

audiofile: Heap-based buffer overflow in ulaw2linear_buf

Heap-based buffer overflow in the ulaw2linear_buf function in G711.cpp in Audio File Library (aka audiofile) 0.3.6, 0.3.5, 0.3.4, 0.3.3, 0.3.2, 0.3.1, 0.3.0, 0.2.7 allows remote attackers to cause a denial of service (crash) via a crafted file.

CVSS 3.1 · 5.5 Medium EPSS 2.6% KEV · Not listed
Vendors
Audiofile Debian
Products
Audiofile Debian Linux
CVE-2017-6835

audiofile: Divide-by-zero in BlockCodec::reset1

The reset1 function in libaudiofile/modules/BlockCodec.cpp in Audio File Library (aka audiofile) 0.3.6 allows remote attackers to cause a denial of service (divide-by-zero error and crash) via a crafted file.

CVSS 3.0 · 5.5 Medium EPSS 2.9% KEV · Not listed
Vendors
Audiofile
Products
Audiofile
CVE-2017-6836

audiofile: Heap-based buffer overflow in Expand3To4Module::run

Heap-based buffer overflow in the Expand3To4Module::run function in libaudiofile/modules/SimpleModule.h in Audio File Library (aka audiofile) 0.3.6, 0.3.5, 0.3.4, 0.3.3, 0.3.2, 0.3.1, 0.3.0 allows remote attackers to cause a denial of service (crash) via a crafted file.

CVSS 3.1 · 5.5 Medium EPSS 3.0% KEV · Not listed
Vendors
Audiofile Debian
Products
Audiofile Debian Linux
CVE-2017-6837

audiofile: Index out of bounds for type int16_t

WAVE.cpp in Audio File Library (aka audiofile) 0.3.6 allows remote attackers to cause a denial of service (crash) via vectors related to a large number of coefficients.

CVSS 3.0 · 5.5 Medium EPSS 2.8% KEV · Not listed
Vendors
Audiofile
Products
Audiofile
CVE-2017-6838

audiofile: Signed integer overflow in sfconvert.c

Integer overflow in sfcommands/sfconvert.c in Audio File Library (aka audiofile) 0.3.6 allows remote attackers to cause a denial of service (crash) via a crafted file.

CVSS 3.0 · 5.5 Medium EPSS 3.0% KEV · Not listed
Vendors
Audiofile
Products
Audiofile
CVE-2017-6839

audiofile: Signed integer overflow in MSADPCM.cpp

Integer overflow in modules/MSADPCM.cpp in Audio File Library (aka audiofile) 0.3.6 allows remote attackers to cause a denial of service (crash) via a crafted file.

CVSS 3.0 · 5.5 Medium EPSS 3.0% KEV · Not listed
Vendors
Audiofile
Products
Audiofile
CVE-2017-6827

audiofile: Heap-based buffer overflow in MSADPCM::initializeCoefficients

Heap-based buffer overflow in the MSADPCM::initializeCoefficients function in MSADPCM.cpp in audiofile (aka libaudiofile and Audio File Library) 0.3.6 allows remote attackers to have unspecified impact via a crafted audio file.

CVSS 3.0 · 7.8 High EPSS 2.9% KEV · Not listed
Vendors
Audiofile
Products
Audiofile
CVE-2017-6829

audiofile: Global buffer overflow in decodeSample

The decodeSample function in IMA.cpp in Audio File Library (aka audiofile) 0.3.6 allows remote attackers to cause a denial of service (crash) via a crafted file.

CVSS 3.0 · 5.5 Medium EPSS 2.8% KEV · Not listed
Vendors
Audiofile
Products
Audiofile
CVE-2017-6832

audiofile: Heap-based buffer overflow in MSADPCM::decodeBlock

Heap-based buffer overflow in the decodeBlock in MSADPCM.cpp in Audio File Library (aka audiofile) 0.3.6, 0.3.5, 0.3.4, 0.3.3, 0.3.2, 0.3.1, 0.3.0, 0.2.7 allows remote attackers to cause a denial of service (crash) via a crafted file.

CVSS 3.1 · 5.5 Medium EPSS 3.0% KEV · Not listed
Vendors
Audiofile Debian
Products
Audiofile Debian Linux
CVE-2017-6828

audiofile: Heap-based buffer overflow in readValue

Heap-based buffer overflow in the readValue function in FileHandle.cpp in audiofile (aka libaudiofile and Audio File Library) 0.3.6 allows remote attackers to have unspecified impact via a crafted WAV file.

CVSS 3.0 · 7.8 High EPSS 3.2% KEV · Not listed
Vendors
Audiofile
Products
Audiofile
CVE-2017-6830

audiofile: Heap-based buffer overflow in alaw2linear_buf

Heap-based buffer overflow in the alaw2linear_buf function in G711.cpp in Audio File Library (aka audiofile) 0.3.6 allows remote attackers to cause a denial of service (crash) via a crafted file.

CVSS 3.0 · 5.5 Medium EPSS 3.0% KEV · Not listed
Vendors
Audiofile
Products
Audiofile
CVE-2020-18781

audiofile: a Denial of Service via crafted file

Heap buffer overflow vulnerability in FilePOSIX::read in File.cpp in audiofile 0.3.6 may cause denial-of-service via a crafted wav file, this bug can be triggered by the executable sfconvert.

CVSS 3.1 · 5.5 Medium EPSS < 1% KEV · Not listed
Vendors
Audiofile
Products
Audiofile