2 matches found
libsndfile denial of service vulnerability (CNVD-2017-38214)
libsndfile is a C library developed by software developer Erik de Castro Lopo that reads and writes audio files in AIFF, AU, and WAV formats through standard interfaces. A security vulnerability exists in the 'wavw64readfmtchunk' function of the wavw64.c file in libsndfile version 1.0.25. An...
6.5CVSS6.7AI score0.0123EPSS
SaveExploits0References1
PT-2017-14648
Name of the Vulnerable Software and Affected Versions libsndfile version 1.0.25 Description A divide-by-zero error exists in the function wav w64 read fmt chunk in wav w64.c, which may lead to denial of service when playing a crafted audio file. Recommendations For libsndfile version 1.0.25, upda...
8.1CVSS0.02229EPSS
SaveExploits0References45
20