CVE-2021-39544

An issue was discovered in sela through 20200412. file::WavFile::writeToFile in wavfile.c has a heap-based buffer overflow...

PT-2021-22632

Name of the Vulnerable Software and Affected Versions: sela versions through 20200412 Description: An issue exists in the function file::WavFile::WavFile located in wav file.c, where a NULL pointer dereference can occur. This allows an attacker to cause Denial of Service. Recommendations: For...

Sela 缓冲区错误漏洞

Sela is a lossless audio codec. A security vulnerability exists in sela, which stems from a heap-based buffer overflow in file::WavFile::writeToFile in wav file.c. The vulnerability is caused by a heap-based buffer overflow in file::WavFile::writeToFile...

Sela 代码问题漏洞

SELA is a lossless audio codec. A null pointer dereference vulnerability exists in the file::WavFile::WavFile function in wavfile.c in SELA 20200412 and earlier versions. An attacker could exploit this vulnerability to cause a denial of service...

PT-2021-22635

Name of the Vulnerable Software and Affected Versions: sela through 20200412 Description: An issue was discovered in the file::WavFile::readFromFile function in wav file.c, which has a heap-based buffer overflow. Recommendations: For sela through 20200412, consider disabling the readFromFile...

Sela 缓冲区错误漏洞

SELA is a lossless audio codec. a heap buffer overflow vulnerability exists in file::WavFile::writeToFile in wavfile.c in SELA 20200412 and earlier versions. No detailed vulnerability details are currently available...

PT-2021-22627

Name of the Vulnerable Software and Affected Versions: sela through 20200412 Description: An issue was discovered in the file::WavFile::writeToFile function in wav file.c, which has a heap-based buffer overflow. Recommendations: For sela through 20200412, as a temporary workaround, consider...

EulerOS 2.0 SP2 : soundtouch (EulerOS-SA-2021-2449)

According to the versions of the soundtouch package installed, the EulerOS installation on the remote host is affected by the following vulnerabilities : - The BPMDetect class in BPMDetect.cpp in libSoundTouch.a in Olli Parviainen SoundTouch 2.0 allows remote attackers to cause a denial of servic...

Scientific Linux Security Update : libsndfile on SL7.x i686/x86_64 (2021:3295)

The remote Scientific Linux 7 host has packages installed that are affected by a vulnerability as referenced in the SLSA-2021:3295-1 advisory. - libsndfile: Heap buffer overflow via crafted WAV file allows arbitrary code execution CVE-2021-3246 Note that Nessus has not tested for this issue but h...

Important: Red Hat Security Advisory: libsndfile security update

An update for libsndfile is now available for Red Hat Enterprise Linux 7. Red Hat Product Security has rated this update as having a security impact of Important. A Common Vulnerability Scoring System CVSS base score, which gives a detailed severity rating, is available for each vulnerability fro...

Important: Red Hat Security Advisory: libsndfile security update

An update for libsndfile is now available for Red Hat Enterprise Linux 8.2 Extended Update Support. Red Hat Product Security has rated this update as having a security impact of Important. A Common Vulnerability Scoring System CVSS base score, which gives a detailed severity rating, is available...

libsndfile: Heap buffer overflow via crafted WAV file allows arbitrary code execution

A heap buffer overflow flaw was found in libsndfile. This flaw allows an attacker to execute arbitrary code via a crafted WAV file. The highest threat from this vulnerability is to confidentiality, integrity, as well as system availability...

Important: Red Hat Security Advisory: libsndfile security update

An update for libsndfile is now available for Red Hat Enterprise Linux 8.1 Extended Update Support. Red Hat Product Security has rated this update as having a security impact of Important. A Common Vulnerability Scoring System CVSS base score, which gives a detailed severity rating, is available...

RHEL 7 : libsndfile (RHSA-2021:3295)

The remote Redhat Enterprise Linux 7 host has packages installed that are affected by a vulnerability as referenced in the RHSA-2021:3295 advisory. libsndfile is a C library for reading and writing files containing sampled sound, such as AIFF, AU, or WAV. Security Fixes: libsndfile: Heap buffer...

libsndfile security update

1.0.25-12.1 - a crafted wav file could cause heap buffer overflow that allowed an arbitrary code execution1985024...

Denial Of Service (DoS)

libsndfile is vulnerable to denial of service. A heap buffer overflow vulnerability in msadpcmdecodeblock of libsndfile allows attackers to execute arbitrary code via a crafted WAV file. A heap buffer overflow flaw was found in libsndfile. This flaw allows an attacker to execute arbitrary code vi...

CentOS 8 : libsndfile (CESA-2021:3253)

The remote CentOS Linux 8 host has packages installed that are affected by a vulnerability as referenced in the CESA-2021:3253 advisory. - libsndfile: Heap buffer overflow via crafted WAV file allows arbitrary code execution CVE-2021-3246 Note that Nessus has not tested for this issue but has...

RHEL 8 : libsndfile (RHSA-2021:3253)

The remote Redhat Enterprise Linux 8 host has packages installed that are affected by a vulnerability as referenced in the RHSA-2021:3253 advisory. libsndfile is a C library for reading and writing files containing sampled sound, such as AIFF, AU, or WAV. Security Fixes: libsndfile: Heap buffer...

Important: Red Hat Security Advisory: libsndfile security update

An update for libsndfile is now available for Red Hat Enterprise Linux 8. Red Hat Product Security has rated this update as having a security impact of Important. A Common Vulnerability Scoring System CVSS base score, which gives a detailed severity rating, is available for each vulnerability fro...

ALSA-2021:3253 Important: libsndfile security update

libsndfile is a C library for reading and writing files containing sampled sound, such as AIFF, AU, or WAV. Security Fixes: libsndfile: Heap buffer overflow via crafted WAV file allows arbitrary code execution CVE-2021-3246 For more details about the security issues, including the impact, a CVSS...