CVE-2026-21066

Improper input validation in libcodec2_sec_flacdec.so (Samsung's FLAC decoder) on Samsung devices prior to the SMR Aug-2026 Release 1 patch allows local attackers to write out-of-bounds memory, potentially enabling privilege escalation. No in-the-wild exploitation is reported. Patch: SMR Aug-2026...

CVE-2026-21066

Improper input validation in libcodec2secflacdec.so prior to SMR Aug-2026 Release 1 allows local attackers to write out-of-bounds memory...

CVE-2025-14369 CVE-2025-14369

drflac, an audio decoder within the drlibs toolset, contains an integer overflow vulnerability flaw due to trusting the totalPCMFrameCount field from FLAC metadata before calculating buffer size, allowing an attacker with a specially crafted file to perform DoS against programs using the tool...

dr_flac contains an integer overflow vulnerability that allows for DoS when provided a crafted file

Overview drflac, an open-source FLAC audio decoder, part of the drlibs audio decoder toolset, contains an integer overflow vulnerability allowing for denial of service DoS when provided a specific crafted file. An attacker can exploit this vulnerability through providing a tool that uses drflac a...

flac:fuzzer_decoder: Use-of-uninitialized-value in fuzzing::memory::memory_test_msan

Project: https://github.com/xiph/flac.git Detailed Report: https://oss-fuzz.com/testcase?key=6649912316002304 Project: flac Fuzzing Engine: libFuzzer Fuzz Target: fuzzerdecoder Job Type: libfuzzermsanflac Platform Id: linux Crash Type: Use-of-uninitialized-value Crash Address: Crash State:...

PT-2020-22052

Name of the Vulnerable Software and Affected Versions FLAC affected versions not specified Description The issue is related to a crash caused by a use-of-uninitialized-value error. The crash occurs in the FLAC::Decoder::FuzzerStream::write callback function, which is part of the FLAC decoder. The...

OSV-2020-819 Use-of-uninitialized-value in fuzzing::memory::memory_test_msan

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=22224 Crash type: Use-of-uninitialized-value Crash state: fuzzing::memory::memorytestmsan fuzzing::memory::memorytest FLAC::Decoder::FuzzerStream::writecallback...

PT-2020-22561

Name of the Vulnerable Software and Affected Versions FLAC affected versions not specified Description The issue is related to a crash caused by the use of an uninitialized value. The crash occurs in the FLAC::Decoder::FuzzerStream::write callback function. Recommendations At the moment, there is...

flac:fuzzer_decoder: Heap-buffer-overflow in FLAC__lpc_restore_signal_16_intrin_sse41

Project: https://github.com/xiph/flac.git Detailed Report: https://oss-fuzz.com/testcase?key=6247735333748736 Project: flac Fuzzing Engine: libFuzzer Fuzz Target: fuzzerdecoder Job Type: libfuzzerasani386flac Platform Id: linux Crash Type: Heap-buffer-overflow WRITE 4 Crash Address: 0xf5101678...

VLC Media Player 2.x < 2.2.5.1 Multiple Vulnerabilities

Binary data 700122.prm...

CentOS 4 / 5 : flac (CESA-2007:0975)

An updated flac package to correct a security issue is now available for Red Hat Enterprise Linux 4 and 5. This update has been rated as having important security impact by the Red Hat Security Response Team. FLAC is a Free Lossless Audio Codec. The flac package consists of a FLAC encoder and...