CVE-2017-6829

The decodeSample function in IMA.cpp in Audio File Library aka audiofile 0.3.6 allows remote attackers to cause a denial of service crash via a crafted file...

AZL-7176 CVE-2017-6833 affecting package audiofile 0.3.6-27

The runPull function in libaudiofile/modules/BlockCodec.cpp in Audio File Library aka audiofile 0.3.6 allows remote attackers to cause a denial of service divide-by-zero error and crash via a crafted file...

AZL-36929 CVE-2017-6837 affecting package audiofile 0.3.6-27

WAVE.cpp in Audio File Library aka audiofile 0.3.6 allows remote attackers to cause a denial of service crash via vectors related to a large number of coefficients...

AZL-7178 CVE-2017-6835 affecting package audiofile 0.3.6-27

The reset1 function in libaudiofile/modules/BlockCodec.cpp in Audio File Library aka audiofile 0.3.6 allows remote attackers to cause a denial of service divide-by-zero error and crash via a crafted file...

CVE-2017-6830

CVE-2017-6830 affects the Audio File Library (audiofile) 0.3.6. The vulnerability is a heap-based buffer overflow in alaw2linear_buf (G711.cpp), exploitable via a crafted audio file to cause a denial-of-service crash. Public advisories (Arch Linux ASA-2017-708, Debian DSA-3814-1) indicate fixes a...

CVE-2017-6837

CVE-2017-6837 affects the Audio File Library (audiofile) 0.3.6. It is triggered by WAVE.cpp via vectors related to a large number of coefficients, enabling denial of service (crash). Multiple advisories note this vulnerability and provide fixes in newer audiofile packages: Debian lists 0.3.6-4 fo...

CVE-2017-6834

Heap-based buffer overflow in the ulaw2linearbuf function in G711.cpp in Audio File Library aka audiofile 0.3.6, 0.3.5, 0.3.4, 0.3.3, 0.3.2, 0.3.1, 0.3.0, 0.2.7 allows remote attackers to cause a denial of service crash via a crafted file...

CVE-2017-6830

Heap-based buffer overflow in the alaw2linearbuf function in G711.cpp in Audio File Library aka audiofile 0.3.6 allows remote attackers to cause a denial of service crash via a crafted file...

CVE-2017-6833

CVE-2017-6833 affects the Audio File Library (audiofile) 0.3.6; the runPull function in BlockCodec.cpp may trigger a divide-by-zero, crashing affected apps via a crafted file (DoS). Public advisories/patches indicate fixes in newer releases (e.g., audiofile 0.3.6-4 and equivalent upstream updates...

CVE-2017-6829

The decodeSample function in IMA.cpp in Audio File Library aka audiofile 0.3.6 allows remote attackers to cause a denial of service crash via a crafted file...

CVE-2017-6829

CVE-2017-6829 affects the Audio File Library (audiofile) 0.3.6. The vulnerability is a flaw in the decodeSample function in IMA.cpp that allows a crafted audio file to cause a denial of service (crash). Public advisories across multiple distributions confirm the issue and relate it to the same fa...

CVE-2017-6838: Integer Overflow or Wraparound

Integer overflow in sfcommands/sfconvert.c in Audio File Library aka audiofile 0.3.6 allows remote attackers to cause a denial of service crash via a crafted file...

CVE-2017-6831: Improper Restriction of Operations within the Bounds of a Memory Buffer

Heap-based buffer overflow in the decodeBlockWAVE function in IMA.cpp in Audio File Library aka audiofile 0.3.6, 0.3.5, 0.3.4, 0.3.3, 0.3.2, 0.3.1, 0.3.0 and 0.2.7 allows remote attackers to cause a denial of service crash via a crafted file...

CVE-2017-6829: Out-of-bounds Read

The decodeSample function in IMA.cpp in Audio File Library aka audiofile 0.3.6 allows remote attackers to cause a denial of service crash via a crafted file...

CVE-2017-6832: Improper Restriction of Operations within the Bounds of a Memory Buffer

Heap-based buffer overflow in the decodeBlock in MSADPCM.cpp in Audio File Library aka audiofile 0.3.6, 0.3.5, 0.3.4, 0.3.3, 0.3.2, 0.3.1, 0.3.0, 0.2.7 allows remote attackers to cause a denial of service crash via a crafted file...

CVE-2017-6828

Heap-based buffer overflow in the readValue function in FileHandle.cpp in audiofile aka libaudiofile and Audio File Library 0.3.6 allows remote attackers to have unspecified impact via a crafted WAV file...

DEBIAN-CVE-2017-6828

Heap-based buffer overflow in the readValue function in FileHandle.cpp in audiofile aka libaudiofile and Audio File Library 0.3.6 allows remote attackers to have unspecified impact via a crafted WAV file...

DEBIAN-CVE-2017-6827

Heap-based buffer overflow in the MSADPCM::initializeCoefficients function in MSADPCM.cpp in audiofile aka libaudiofile and Audio File Library 0.3.6 allows remote attackers to have unspecified impact via a crafted audio file...

AZL-36919 CVE-2017-6827 affecting package audiofile 0.3.6-27

Heap-based buffer overflow in the MSADPCM::initializeCoefficients function in MSADPCM.cpp in audiofile aka libaudiofile and Audio File Library 0.3.6 allows remote attackers to have unspecified impact via a crafted audio file...

AZL-36920 CVE-2017-6828 affecting package audiofile 0.3.6-27

Heap-based buffer overflow in the readValue function in FileHandle.cpp in audiofile aka libaudiofile and Audio File Library 0.3.6 allows remote attackers to have unspecified impact via a crafted WAV file...