CVE-2014-9496

CVE-2014-9496 affects libsndfile: the sd2_parse_rsrc_fork function in sd2.c can trigger an out-of-bounds read via an (1) map offset or (2) rsrc marker. Multiple connected advisories confirm this vulnerability in libsndfile and list out-of-bounds reads as the impact. The condition is tied to the s...

CVE-2014-9756

CVE-2014-9756 affects libsndfile, where the psf_fwrite function in file_io.c can trigger a divide-by-zero error via the headindex variable, leading to a denial of service (application crash). The available connected sources confirm the vulnerable component and nature of the issue but do not provi...