Lucene search
+L

6 matches found

AstraLinux
AstraLinux
•added 2026/10/15 3:53 p.m.•14 views

Astra Linux – Vulnerability in libsndfile

In version 1.2.2 of libsndfile, there is a buffer overflow issue in the oggvorbis.c file, specifically in the vorbisanalysiswrote out-of-bounds read function...

5.5CVSS6.8AI score0.00311EPSS
SaveExploits1References2
osv_oesa
osv_oesa
•added 2025/10/31 11:09 a.m.•15 views

OESA-2025-2571 libsndfile security update

Libsndfile is a C library for reading and writing files containing sampled sound such as MS Windows WAV and the Apple/SGI AIFF format through one standard library interface. Security Fixes: libsndfile through 1.2.2 has an oggvorbis.c vorbisanalysiswrote out-of-bounds read.CVE-2024-50612...

5.5CVSS6.4AI score0.00311EPSS
SaveExploits1References2
osv_clsa
osv_clsa
•added 2025/09/16 4:44 p.m.•33 views

CLSA-2025-1758041082 libsndfile: Fix of CVE-2024-50612

CVE-2024-50612: fix out-of-bounds read in vorbisanalysiswrote in oggvorbis.c...

5.5CVSS6.5AI score0.00311EPSS
SaveExploits1References1
osv_oesa
osv_oesa
•added 2024/12/13 11:08 a.m.•12 views

OESA-2024-2559 libsndfile security update

Libsndfile is a C library for reading and writing files containing sampled sound such as MS Windows WAV and the Apple/SGI AIFF format through one standard library interface. Security Fixes: libsndfile through 1.2.2 has an oggvorbis.c vorbisanalysiswrote out-of-bounds read.CVE-2024-50612...

5.5CVSS7AI score0.00311EPSS
SaveExploits1References2
osv_debian
osv_debian
•added 2017/07/31 1:29 p.m.•15 views

DEBIAN-CVE-2017-11333

The vorbisanalysiswrote function in lib/block.c in Xiph.Org libvorbis 1.3.5 allows remote attackers to cause a denial of service OOM via a crafted wav file...

5.5CVSS6.7AI score0.04838EPSS
SaveExploits3References1
Positive Technologies
Positive Technologies
•added 2017/07/31 12:00 a.m.•5 views

PT-2017-11933

Name of the Vulnerable Software and Affected Versions libvorbis version 1.3.5 Description The issue allows remote attackers to cause a denial of service OOM via a crafted wav file. This is due to a problem in the vorbis analysis wrote function in lib/block.c. Recommendations For libvorbis version...

6.5CVSS0.04838EPSS
SaveExploits3References23
Rows per page
Query Builder