Out-of-bounds read In libsndfile
Description
An out-of-bounds read flaw was found in libsndfile's FLAC codec functionality. An attacker who is able to submit a specially crafted file (via tricking a user to open or otherwise) to an application linked with libsndfile and using the FLAC codec, could trigger an out-of-bounds read that would most likely cause a crash but could potentially leak memory information that could be used in further exploitation of other flaws.
Mitigation
Update Impact
Minimal update. May introduce new vulnerabilities or breaking changes.
Ecosystem | Package | Affected version | Patched versions |
|---|---|---|---|
debian 12 | 1.1.0-1 | ||
debian 13 | 1.1.0-1 | ||
debian 11 | 1.0.31-2+deb11u2 | ||
debian 14 | 1.1.0-1 | ||
rpm rhel6 | - | - | |
rpm rhel8 | 0:1.0.28-12.el8 | ||
rpm rhel7 | - | - |
Aliases
1. 2. 3. 4. 5.