Buffer Overflow

Overview Affected versions of this package are vulnerable to Buffer Overflow via the ircamreadheader function when processing malformed IRCAM audio files. An attacker can achieve memory corruption and potentially execute arbitrary code by supplying specially crafted input files. Remediation There...

libsndfile 安全漏洞

libsndfile is a libsndfile open source AC library for reading and writing sound files containing sampled audio data. A security vulnerability exists in libsndfile 1.2.2 and earlier versions, which stems from a buffer overflow when processing malformed IRCAM audio files, which could lead to memory...

CVE-2025-52194

A buffer overflow vulnerability exists in libsndfile version 1.2.2 and potentially earlier versions when processing malformed IRCAM audio files. The vulnerability occurs in the ircamreadheader function at src/ircam.c:164 during sample rate processing, leading to memory corruption and potential co...

CVE-2025-52194

Removed by vendor...

CVE-2025-52194

CVE-2025-52194 affects libsndfile (v1.2.2 and potentially earlier) with a buffer overflow in ircam_read_header (src/ircam.c:164) during IRCAM audio file sample-rate processing. This causes memory corruption and can lead to code execution. Connected sources corroborate the same vulnerability descr...

CVE-2025-52194

A buffer overflow vulnerability exists in libsndfile version 1.2.2 and potentially earlier versions when processing malformed IRCAM audio files. The vulnerability occurs in the ircamreadheader function at src/ircam.c:164 during sample rate processing, leading to memory corruption and potential co...

CVE-2025-52194

A buffer overflow vulnerability exists in libsndfile version 1.2.2 and potentially earlier versions when processing malformed IRCAM audio files. The vulnerability occurs in the ircamreadheader function at src/ircam.c:164 during sample rate processing, leading to memory corruption and potential co...

CVE-2025-52194

A buffer overflow vulnerability exists in libsndfile version 1.2.2 and potentially earlier versions when processing malformed IRCAM audio files. The vulnerability occurs in the ircamreadheader function at src/ircam.c:164 during sample rate processing, leading to memory corruption and potential co...

PT-2025-32388

Name of the Vulnerable Software and Affected Versions: libsndfile versions prior to 1.2.2 Description: A buffer overflow exists when processing malformed IRCAM audio files. The issue occurs in the ircam read header function at src/ircam.c:164 during sample rate processing, potentially leading to...

TencentOS Server 4: libsndfile (TSSA-2025:0003)

The version of Tencent Linux installed on the remote TencentOS Server 4 host is prior to tested version. It is, therefore, affected by a vulnerability as referenced in the TSSA-2025:0003 advisory. Package updates are available for TencentOS Server 4 that fix the following vulnerabilities:...

TencentOS Server 4: libsndfile (TSSA-2025:0131)

The version of Tencent Linux installed on the remote TencentOS Server 4 host is prior to tested version. It is, therefore, affected by a vulnerability as referenced in the TSSA-2025:0131 advisory. Package updates are available for TencentOS Server 4 that fix the following vulnerabilities:...

TencentOS Server 3: libsndfile (TSSA-2024:1144)

The version of Tencent Linux installed on the remote TencentOS Server 3 host is prior to tested version. It is, therefore, affected by a vulnerability as referenced in the TSSA-2024:1144 advisory. Package updates are available for TencentOS Server 3 that fix the following vulnerabilities:...

TencentOS Server 3: libsndfile (TSSA-2023:0140)

The version of Tencent Linux installed on the remote TencentOS Server 3 host is prior to tested version. It is, therefore, affected by multiple vulnerabilities as referenced in the TSSA-2023:0140 advisory. Package updates are available for TencentOS Server 3 that fix the following vulnerabilities...

TencentOS Server 3: libsndfile (TSSA-2024:0431)

The version of Tencent Linux installed on the remote TencentOS Server 3 host is prior to tested version. It is, therefore, affected by a vulnerability as referenced in the TSSA-2024:0431 advisory. Package updates are available for TencentOS Server 3 that fix the following vulnerabilities:...

Fedora: Security Advisory (FEDORA-2024-bb1826234a)

The remote host is missing an update for the SPDX-FileCopyrightText: 2025 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

Fedora: Security Advisory (FEDORA-2024-1318318e7a)

The remote host is missing an update for the SPDX-FileCopyrightText: 2025 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

CVE-2009-4835

The 1 htkreadheader, 2 alawinit, 3 ulawinit, 4 pcminit, 5 float32init, and 6 sdsreadheader functions in libsndfile 1.0.20 allow context-dependent attackers to cause a denial of service divide-by-zero error and application crash via a crafted audio file...

ROS-20250515-03

Vulnerability of flacbuffercopy function of libsndfile library is related to reading data outside the buffer boundaries in memory. Exploitation of the vulnerability could allow a remote attacker to gain unauthorized access to protected information and cause a denial of service. unauthorized acces...

Alibaba Cloud Linux 3 : 0066: libsndfile (ALINUX3-SA-2021:0066)

The remote Alibaba Cloud Linux 3 host has packages installed that are affected by a vulnerability as referenced in the ALINUX3-SA-2021:0066 advisory. Package updates are available for Alibaba Cloud Linux 3 that fix the following vulnerabilities: CVE-2021-3246: A heap buffer overflow vulnerability...

Alibaba Cloud Linux 3 : 0118: libsndfile (ALINUX3-SA-2024:0118)

The remote Alibaba Cloud Linux 3 host has packages installed that are affected by a vulnerability as referenced in the ALINUX3-SA-2024:0118 advisory. Package updates are available for Alibaba Cloud Linux 3 that fix the following vulnerabilities: CVE-2022-33065: Multiple signed integers overflow i...