Lucene search

K
cvelistFlexeraCVELIST:CVE-2017-6892
HistoryJun 12, 2017 - 4:00 p.m.

CVE-2017-6892

2017-06-1216:00:00
flexera
www.cve.org
6

AI Score

6.5

Confidence

High

EPSS

0.005

Percentile

75.7%

In libsndfile version 1.0.28, an error in the “aiff_read_chanmap()” function (aiff.c) can be exploited to cause an out-of-bounds read memory access via a specially crafted AIFF file.

CNA Affected

[
  {
    "product": "libsndfile",
    "vendor": "Flexera Software LLC",
    "versions": [
      {
        "status": "affected",
        "version": "1.0.28"
      }
    ]
  }
]