It was discovered the fix for CVE-2018-19758 (libsndfile) was not complete and still allows a read beyond the limits of a buffer in wav_write_header() function in wav.c. A local attacker may use this flaw to make the application crash.

🗓️ 28 Jan 2021 08:00:00Reported by MicrosoftType

Incomplete fix for CVE-2018-19758 in libsndfile causes buffer overread in wav_write_header, a crash.

Reporter	Title	Published	Views	Family All 120
FreeBSD	libsndfile -- out-of-bounds read memory access	14 Feb 201900:00	–	freebsd
AlpineLinux	CVE-2018-19758	30 Nov 201803:00	–	alpinelinux
AlpineLinux	CVE-2019-3832	20 Mar 201920:00	–	alpinelinux
BDU FSTEC	The vulnerability of the wav_write_header() function in the Libsndfile library, which is used for reading and writing audio files, relates to reading data beyond the allowed buffer limits. This allows an attacker to cause a service failure.	13 Jul 202100:00	–	bdu_fstec
BDU FSTEC	The vulnerability of the wav_write_header function in the libsndfile library, which relates to reading beyond the allowable buffer data limits, allows a attacker to cause a service failure.	22 Jul 202100:00	–	bdu_fstec
CBLMariner	CVE-2019-3832 affecting package libsndfile 1.0.28-14	7 Apr 202100:22	–	cbl_mariner
CBLMariner	CVE-2018-19758 affecting package libsndfile 1.0.28-14	7 Apr 202100:22	–	cbl_mariner
CBLMariner	CVE-2018-19758 affecting package libsndfile 1.0.28-14	7 Apr 202100:22	–	cbl_mariner
CBLMariner	CVE-2019-3832 affecting package libsndfile 1.0.28-14	7 Apr 202100:22	–	cbl_mariner
CNVD	libsndfile buffer out-of-bounds read vulnerability (CNVD-2019-00814)	30 Nov 201800:00	–	cnvd