UBUNTU-CVE-2025-50950

Audiofile v0.3.7 was discovered to contain a NULL pointer dereference via the ModuleState::setup function...

AudioFile 安全漏洞

AudioFile is a simple C++ library containing only header files by the individual developer Adam Stark in the UK. It is used to read and write audio files. A security vulnerability exists in AudioFile version v0.3.7, which stems from a null pointer dereference in the ModuleState::setup function...

PT-2025-43528

Name of the Vulnerable Software and Affected Versions Audiofile version 0.3.7 Description The software contains a NULL pointer dereference within the ModuleState::setup function. This can lead to unexpected behavior or a denial of service. Recommendations Update to a newer version that contains a...

CVE-2025-50950

Audiofile v0.3.7 was discovered to contain a NULL pointer dereference via the ModuleState::setup function...

CVE-2025-50950

CVE-2025-50950 affects the Audiofile library (v0.3.7) with a NULL pointer dereference in ModuleState::setup. The issue is confirmed by multiple advisories (Red Hat RHSA-2025:23457, Amazon ALAS2-2025-3087, EU/NVD entries) and assigns a CVSS v3.1 base score of 7.5 (High) with network attack vector,...

CVE-2025-50950

Audiofile v0.3.7 was discovered to contain a NULL pointer dereference via the ModuleState::setup function...

CVE-2025-50950

Audiofile v0.3.7 was discovered to contain a NULL pointer dereference via the ModuleState::setup function...

EUVD-2020-10695

Malware in sbrugna...

Integer overflow in modules/MSADPCM.cpp in Audio File Library (aka audiofile) 0.3.6 allows remote attackers to cause a denial of service (crash) via a crafted file.

...

WAVE.cpp in Audio File Library (aka audiofile) 0.3.6 allows remote attackers to cause a denial of service

...

Heap-based buffer overflow in Audio File Library (aka audiofile) 0.3.6 allows remote attackers to cause a denial of service

...

Heap-based buffer overflow in audiofile allows remote attackers to have unspecified impact

...

Heap-based buffer overflow in the decodeBlockWAVE function in IMA.cpp in Audio File Library (aka audiofile) 0.3.6, 0.3.5, 0.3.4, 0.3.3, 0.3.2, 0.3.1, 0.3.0 and 0.2.7 allows remote attackers to cause a denial of service (crash) via a crafted file.

...

Heap-based buffer overflow in audiofile allows remote attackers to have unspecified impact via a crafted audio file

...

Debian: Security Advisory (DLA-4255-1)

The remote host is missing an update for the Debian SPDX-FileCopyrightText: 2025 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

[SECURITY] [DLA 4255-1] audiofile security update

------------------------------------------------------------------------- Debian LTS Advisory DLA-4255-1 [email protected] https://www.debian.org/lts/security/ Thorsten Alteholz July 28, 2025 https://wiki.debian.org/LTS -...

DLA-4255-1 audiofile - security update

Bulletin has no description...

Debian dla-4255 : audiofile-tools - security update

The remote Debian 11 host has packages installed that are affected by multiple vulnerabilities as referenced in the dla-4255 advisory. - ------------------------------------------------------------------------- Debian LTS Advisory DLA-4255-1 [email protected]...

SUSE SLES12 Security Update : audiofile (SUSE-SU-2025:02283-1)

The remote SUSE Linux SLES12 host has packages installed that are affected by multiple vulnerabilities as referenced in the SUSE-SU-2025:02283-1 advisory. - CVE-2019-13147: Do not allow too many channel to prevent NULL pointer dereference bsc1140031. - CVE-2022-24599: Clear buffer when allocating...

Security update for audiofile

This update for audiofile fixes the following issues: CVE-2019-13147: Do not allow too many channel to prevent NULL pointer dereference bsc1140031. CVE-2022-24599: Clear buffer when allocating bsc1196487. Patch Instructions: To install this SUSE update use the SUSE recommended installation method...