Ubuntu 18.04 LTS / 20.04 LTS : libsndfile vulnerability (USN-5025-1)

The remote Ubuntu 18.04 LTS / 20.04 LTS host has packages installed that are affected by a vulnerability as referenced in the USN-5025-1 advisory. It was discovered that libsndfile incorrectly handled certain malformed files. A remote attacker could use this issue to cause libsndfile to crash,...

Ubuntu 16.04 ESM : libsndfile vulnerability (USN-5025-2)

The remote Ubuntu 16.04 ESM host has packages installed that are affected by a vulnerability as referenced in the USN-5025-2 advisory. USN-5025-1 fixed a vulnerability in libsndfile. This update provides the corresponding update for Ubuntu 14.04 ESM and Ubuntu 16.04 ESM. Tenable has extracted the...

SUSE SLES11 Security Update : libsndfile (SUSE-SU-2021:14769-1)

The remote SUSE Linux SLES11 / SLESSAP11 host has packages installed that are affected by a vulnerability as referenced in the SUSE-SU-2021:14769-1 advisory. - CVE-2021-3246: Fixed a heap buffer overflow vulnerability in msadpcmdecodeblock. bsc1188540 Tenable has extracted the preceding descripti...

The vulnerability of the wav_write_header function in the libsndfile library, which relates to reading beyond the allowable buffer data limits, allows a attacker to cause a service failure.

The vulnerability of the wavwriteheader function in the libsndfile library is related to reading data beyond the allowable buffer size. Exploiting this vulnerability could allow a remote attacker to cause service interruptions...

CVE-2021-3246

A heap buffer overflow flaw was found in libsndfile. This flaw allows an attacker to execute arbitrary code via a crafted WAV file. The highest threat from this vulnerability is to confidentiality, integrity, as well as system availability...

CVE-2021-3246

A heap buffer overflow vulnerability in msadpcmdecodeblock of libsndfile 1.0.30 allows attackers to execute arbitrary code via a crafted WAV file...

CVE-2021-3246

A heap buffer overflow vulnerability in msadpcmdecodeblock of libsndfile 1.0.30 allows attackers to execute arbitrary code via a crafted WAV file...

CVE-2021-3246

A heap buffer overflow vulnerability in msadpcmdecodeblock of libsndfile 1.0.30 allows attackers to execute arbitrary code via a crafted WAV file...

Heap overflow

A heap buffer overflow vulnerability in msadpcmdecodeblock of libsndfile 1.0.30 allows attackers to execute arbitrary code via a crafted WAV file...

CVE-2021-3246

A heap buffer overflow vulnerability in msadpcmdecodeblock of libsndfile 1.0.30 allows attackers to execute arbitrary code via a crafted WAV file...

CVE-2021-3246

CVE-2021-3246 describes a heap buffer overflow in libsndfile’s msadpcm_decode_block (v1.0.30) that can allow arbitrary code execution through a crafted WAV file. Multiple connected advisories confirm the vulnerable component and affected library (libsndfile) and show vendor advisories for various...

CVE-2021-3246

A heap buffer overflow vulnerability in msadpcmdecodeblock of libsndfile 1.0.30 allows attackers to execute arbitrary code via a crafted WAV file...

CVE-2021-3246

A heap buffer overflow vulnerability in msadpcmdecodeblock of libsndfile 1.0.30 allows attackers to execute arbitrary code via a crafted WAV file...

CVE-2021-3246: Out-of-bounds Write

A heap buffer overflow vulnerability in msadpcmdecodeblock of libsndfile 1.0.30 allows attackers to execute arbitrary code via a crafted WAV file...

libsndfile 缓冲区错误漏洞

libsndfile is an AC library for reading and writing sound files containing sampled audio data. A security vulnerability exists in libsndfile 1.0.30, which stems from a heap buffer overflow vulnerability in the msadpcm decoding block allows an attacker to execute arbitrary code via a crafted WAV...

PT-2021-7406 · Qualcomm · Qualcomm Snapdragon Mobile +5

Name of the Vulnerable Software and Affected Versions: Qualcomm Snapdragon Auto versions affected versions not specified Qualcomm Snapdragon Compute versions affected versions not specified Qualcomm Snapdragon Connectivity versions affected versions not specified Qualcomm Snapdragon Industrial IO...

The vulnerability of the wav_write_header() function in the Libsndfile library, which is used for reading and writing audio files, relates to reading data beyond the allowed buffer limits. This allows an attacker to cause a service failure.

The vulnerability of the wavwriteheader function in the Libsndfile library for reading and writing audio files is related to reading data beyond the allowable buffer size. Exploiting this vulnerability could allow an attacker to cause a service failure...

The vulnerability of the ParseDsdiffHeaderConfig function in the dsdiff.c component of the WavPack audio codec, related to division by zero, allows a attacker to cause a service failure.

The vulnerability of the ParseDsdiffHeaderConfig function in the dsdiff.c component of the WavPack audio codec is related to division by zero. Exploiting this vulnerability allows a remote attacker to cause a service failure using a malicious .wav file...

The vulnerability of the WavpackPackInit function in the packUtils.c component of the WavPack audio codec, which is related to infinite loop execution, allows attackers to cause a service failure.

The vulnerability of the WavpackPackInit function in the packUtils.c component of the WavPack audio codec is related to the infinite execution of a loop. Exploiting this vulnerability allows an attacker to trigger a service failure using a specially created WAV audio file...

Advisory ROSA-SA-2021-1995

Software: wavpack 4.60.1 OS: Cobalt 7.9 CVE-ID: CVE-2016-10169 CVE-Crit: MEDIUM CVE-DESC: The readcode function in readwords.c in Wavpack before 5.1.0 allows remote attackers to cause a denial of service read out of range via a crafted WV file. CVE-STATUS: default CVE-REV: default CVE-ID:...