6.4 Medium
AI Score
Confidence
High
0.004 Low
EPSS
Percentile
74.9%
An out of bounds read in the function d2ulaw_array() in ulaw.c of libsndfile 1.0.28 may lead to a remote DoS attack or information disclosure, related to mishandling of the NAN and INFINITY floating-point values.
github.com/erikd/libsndfile/issues/317
lists.debian.org/debian-lts-announce/2018/12/msg00016.html
lists.debian.org/debian-lts-announce/2020/10/msg00030.html
security.gentoo.org/glsa/202007-65
usn.ubuntu.com/4013-1/