CVE-2017-6836

2017-03-2016:59:02

Google

osv.dev

0.007 Low

EPSS

Percentile

80.6%

JSON

Heap-based buffer overflow in the Expand3To4Module::run function in libaudiofile/modules/SimpleModule.h in Audio File Library (aka audiofile) 0.3.6, 0.3.5, 0.3.4, 0.3.3, 0.3.2, 0.3.1, 0.3.0 allows remote attackers to cause a denial of service (crash) via a crafted file.

CPENameOperatorVersion
audiofileeqaudiofile-0.2.2
audiofileeqaudiofile-0.3.4
audiofileeqaudiofile-0.2.1
audiofileeqaudiofile-0.2.4
audiofileeqaudiofile-0.3.1
audiofileeqaudiofile-0.2.5
audiofileeqaudiofile-0.2.6
audiofileeqaudiofile-0.3.0
audiofileeqaudiofile-0.3.3
audiofileeqaudiofile-0.3.6

Name	Operator	Version
audiofile	eq	audiofile-0.2.2
audiofile	eq	audiofile-0.3.4
audiofile	eq	audiofile-0.2.1
audiofile	eq	audiofile-0.2.4
audiofile	eq	audiofile-0.3.1
audiofile	eq	audiofile-0.2.5
audiofile	eq	audiofile-0.2.6
audiofile	eq	audiofile-0.3.0
audiofile	eq	audiofile-0.3.3
audiofile	eq	audiofile-0.3.6