CVE-2025-50950

audiofile: NULL pointer dereference in the ModuleState::setup function

View on CVE.org
Published Oct 23, 2025 CVSS 3.1 · 7.5 High EPSS < 1% KEV · Not listed
Description
Audiofile v0.3.7 was discovered to contain a NULL pointer dereference via the ModuleState::setup function.

Remediation

No solution or workaround provided in the CVE record

Tracking

Sign in to view the affected projects.

Advisories

No advisories available
History
Type Values Removed Values Added
CPEs cpe:2.3:a:audiofile:audiofile:0.3.7:*:*:*:*:*:*:*
Type Values Removed Values Added
Title audiofile: NULL pointer dereference in the ModuleState::setup function
References
Metrics threat_severity

None

 threat_severity

Moderate
Type Values Removed Values Added
Metrics ssvc

{'options': {'Automatable': 'no', 'Exploitation': 'none', 'Technical Impact': 'partial'}, 'version': '2.0.3'}
Type Values Removed Values Added
First Time appeared Audiofile
Audiofile audiofile
Vendors & Products Audiofile
Audiofile audiofile
Type Values Removed Values Added
Weaknesses CWE-476
Metrics cvssV3_1

{'score': 7.5, 'vector': 'CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H'}
Type Values Removed Values Added
Description Audiofile v0.3.7 was discovered to contain a NULL pointer dereference via the ModuleState::setup function.
References
Earlier changes (1)
Weaknesses

Sources

Status
PUBLISHED
Assigner
mitre
Published
Updated
Oct 23, 2025, 3:42 PM
Reserved
Jun 16, 2025, 12:00 AM

View source JSON

Updated
Oct 23, 2025, 3:42 PM

JSON

Status
Analyzed
Published
Oct 23, 2025, 4:16 PM
Modified
Oct 27, 2026, 12:10 PM

View source JSON

Severity
Moderate
Public date
Oct 23, 2025, 12:00 AM

View source Bugzilla JSON

Updated
Oct 24, 2025, 10:16 AM

JSON