Lucene search

PRIOn knowledge basePRION:CVE-2020-18781

HistoryAug 22, 2023 - 7:15 p.m.

Heap overflow

2023-08-2219:15:00

PRIOn knowledge base

www.prio-n.com

heap overflow

fileposix::read

file.cpp

crafted wav file

denial-of-service

sfconvert

nvd

5.6 Medium

AI Score

Confidence

High

0.0004 Low

EPSS

Percentile

12.7%

JSON

Heap buffer overflow vulnerability in FilePOSIX::read in File.cpp in audiofile 0.3.6 may cause denial-of-service via a crafted wav file, this bug can be triggered by the executable sfconvert.

CPENameOperatorVersion
audiofileeq0.3.6

CPE	Name	Operator	Version
	audiofile	eq	0.3.6

References

github.com/mpruett/audiofile/issues/56