CVE-2022-24599

CVE-2022-24599 concerns memory leak in autofile Audio File Library 0.3.6, specifically in printfileinfo() where the copyrightstring data is not properly truncated with zero bytes, potentially allowing leakage of sensitive information via a crafted file. Connected advisories confirm the issue acro...

PT-2022-16746

Name of the Vulnerable Software and Affected Versions autofile Audio File Library version 0.3.6 Description The issue is related to a memory leak in the printfileinfo function, located in printinfo.c, which can be exploited by an attacker to leak sensitive information via a crafted file. This...

CVE-2022-24599: Missing Release of Memory after Effective Lifetime

In autofile Audio File Library 0.3.6, there exists one memory leak vulnerability in printfileinfo, in printinfo.c, which allows an attacker to leak sensitive information via a crafted file. The printfileinfo function calls the copyrightstring function to get data, however, it dosn't use zero byte...

CVE-2022-24599

In autofile Audio File Library 0.3.6, there exists one memory leak vulnerability in printfileinfo, in printinfo.c, which allows an attacker to leak sensitive information via a crafted file. The printfileinfo function calls the copyrightstring function to get data, however, it dosn't use zero byte...

OESA-2021-1040 audiofile security update

The Audio File Library is a C-based library for reading and writing audio files in many common formats. The Audio File Library provides a uniform API which abstracts away details of file formats and data formats. The same calls for opening a file, accessing and manipulating audio metadata e.g...

audiofile: NULL pointer dereference in ModuleState::setup() in modules/ModuleState.cpp allows for denial of service via crafted file

The audiofile Audio File Library 0.3.6 has a NULL pointer dereference bug in ModuleState::setup in modules/ModuleState.cpp, which allows an attacker to cause a denial of service via a crafted caf file, as demonstrated by sfconvert...

Audio File Library Buffer Overflow Vulnerability

Audio File Library aka audiofile is an audio file library. A buffer overflow vulnerability exists in the 'afReadFrames' function in Audio File Library. The vulnerability stems from a networked system or product performing operations in memory without properly validating data boundaries, resulting...

Buffer overflow

Buffer overflow in the afReadFrames function in audiofile aka libaudiofile and Audio File Library allows user-assisted remote attackers to cause a denial of service program crash or possibly execute arbitrary code via a crafted audio file, as demonstrated by sixteen-stereo-to-eight-mono.c...

CVE-2015-7747

CVE-2015-7747 affects the Audio File Library (audiofile/libaudiofile). The vulnerability is a buffer overflow in afReadFrames that can be triggered by a crafted audio file, potentially causing a denial of service or arbitrary code execution. The issue is corroborated across multiple feeds (includ...

CVE-2015-7747: Buffer Copy without Checking Size of Input

Buffer overflow in the afReadFrames function in audiofile aka libaudiofile and Audio File Library allows user-assisted remote attackers to cause a denial of service program crash or possibly execute arbitrary code via a crafted audio file, as demonstrated by sixteen-stereo-to-eight-mono.c...

AZL-44760 CVE-2019-13147 affecting package audiofile 0.3.6-27

In Audio File Library aka audiofile 0.3.6, there exists one NULL pointer dereference bug in ulaw2linearbuf in G711.cpp in libmodules.a that allows an attacker to cause a denial of service via a crafted file...

CVE-2019-13147

In Audio File Library aka audiofile 0.3.6, there exists one NULL pointer dereference bug in ulaw2linearbuf in G711.cpp in libmodules.a that allows an attacker to cause a denial of service via a crafted file...

DEBIAN-CVE-2019-13147

In Audio File Library aka audiofile 0.3.6, there exists one NULL pointer dereference bug in ulaw2linearbuf in G711.cpp in libmodules.a that allows an attacker to cause a denial of service via a crafted file...

CVE-2019-13147

In Audio File Library aka audiofile 0.3.6, there exists one NULL pointer dereference bug in ulaw2linearbuf in G711.cpp in libmodules.a that allows an attacker to cause a denial of service via a crafted file...

Null pointer dereference

In Audio File Library aka audiofile 0.3.6, there exists one NULL pointer dereference bug in ulaw2linearbuf in G711.cpp in libmodules.a that allows an attacker to cause a denial of service via a crafted file...

UBUNTU-CVE-2019-13147

In Audio File Library aka audiofile 0.3.6, there exists one NULL pointer dereference bug in ulaw2linearbuf in G711.cpp in libmodules.a that allows an attacker to cause a denial of service via a crafted file...

CVE-2019-13147: NULL Pointer Dereference

In Audio File Library aka audiofile 0.3.6, there exists one NULL pointer dereference bug in ulaw2linearbuf in G711.cpp in libmodules.a that allows an attacker to cause a denial of service via a crafted file...

PT-2019-2965

Name of the Vulnerable Software and Affected Versions Audio File Library versions 0.3.6 Description The issue is related to a NULL pointer dereference bug in the ulaw2linear buf function in G711.cpp within the libmodules.a library. This bug allows an attacker to cause a denial of service via a...

CVE-2019-13147

CVE-2019-13147 affects Audio File Library (audiofile) 0.3.6, via a NULL pointer dereference in ulaw2linear_buf (G711.cpp in libmodules.a) that could cause a denial of service with a crafted file. Connected advisories confirm fixes across distros: Debian 0.3.6-5+deb11u1; openSUSE/SUSE updates (e.g...

CVE-2019-13147

In Audio File Library aka audiofile 0.3.6, there exists one NULL pointer dereference bug in ulaw2linearbuf in G711.cpp in libmodules.a that allows an attacker to cause a denial of service via a crafted file...