1673 matches found
Out-of-bounds Read
libsndfile.so is vulnerable to Out-of-bounds Read. The vulnerability is due to improper handling of the vorbisanalysiswrote function in the oggvorbis.c file, which fails to validate input data, allowing an attacker to craft a malicious Vorbis file that triggers the out-of-bounds read when process...
[SECURITY] Fedora 41 Update: libsndfile-1.2.2-5.fc41
libsndfile is a C library for reading and writing sound files such as AIFF, AU, WAV, and others through one standard interface. It can currently read/write 8, 16, 24 and 32-bit PCM files as well as 32 and 64-bit floating point WAV files and a number of compressed formats. It compiles and runs on...
Fedora 41 : libsndfile (2024-1318318e7a)
The remote Fedora 41 host has a package installed that is affected by a vulnerability as referenced in the FEDORA-2024-1318318e7a advisory. fix crash in in ogg vorbis 2322326 CVE-2024-50612 Tenable has extracted the preceding description block directly from the Fedora security advisory. Note that...
SUSE CVE-2024-50612
libsndfile through 1.2.2 has an oggvorbis.c vorbisanalysiswrote out-of-bounds read...
SUSE CVE-2024-50613
libsndfile through 1.2.2 has a reachable assertion, that may lead to application exit, in mpegl3encode.c mpegl3encoderclose...
CVE-2024-50613
libsndfile through 1.2.2 has a reachable assertion, that may lead to application exit, in mpegl3encode.c mpegl3encoderclose...
CVE-2024-50612
A flaw was found in the libsndfile package. A specially crafted input file may trigger an out-of-bounds read, leading to memory corruption and a denial of service...
AZL-51977 CVE-2024-50613 affecting package libsndfile 1.0.31-4
libsndfile through 1.2.2 has a reachable assertion, that may lead to application exit, in mpegl3encode.c mpegl3encoderclose...
ALPINE-CVE-2024-50612
libsndfile through 1.2.2 has an oggvorbis.c vorbisanalysiswrote out-of-bounds read...
CVE-2024-50612
libsndfile through 1.2.2 has an oggvorbis.c vorbisanalysiswrote out-of-bounds read...
CVE-2024-50613
libsndfile through 1.2.2 has a reachable assertion, that may lead to application exit, in mpegl3encode.c mpegl3encoderclose...
AZL-51891 CVE-2024-50612 affecting package libsndfile for versions less than 1.0.31-4
libsndfile through 1.2.2 has an oggvorbis.c vorbisanalysiswrote out-of-bounds read...
DEBIAN-CVE-2024-50613
libsndfile through 1.2.2 has a reachable assertion, that may lead to application exit, in mpegl3encode.c mpegl3encoderclose...
DEBIAN-CVE-2024-50612
libsndfile through 1.2.2 has an oggvorbis.c vorbisanalysiswrote out-of-bounds read...
AZL-52166 CVE-2024-50612 affecting package libsndfile for versions less than 1.2.2-3
libsndfile through 1.2.2 has an oggvorbis.c vorbisanalysiswrote out-of-bounds read...
AZL-51909 CVE-2024-50613 affecting package libsndfile 1.2.2-5
libsndfile through 1.2.2 has a reachable assertion, that may lead to application exit, in mpegl3encode.c mpegl3encoderclose...
UBUNTU-CVE-2024-50612
libsndfile through 1.2.2 has an oggvorbis.c vorbisanalysiswrote out-of-bounds read...
UBUNTU-CVE-2024-50613
libsndfile through 1.2.2 has a reachable assertion, that may lead to application exit, in mpegl3encode.c mpegl3encoderclose...
PT-2024-34358
Name of the Vulnerable Software and Affected Versions: libsndfile versions prior to 1.2.3 Description: The issue is related to an out-of-bounds read in the ogg vorbis.c component of the libsndfile library, specifically in the vorbis analysis wrote function. This could potentially allow an attacke...
