Fluid Attacks Database

Description

In Audio File Library (aka audiofile) 0.3.6, there exists one NULL pointer dereference bug in ulaw2linear_buf in G711.cpp in libmodules.a that allows an attacker to cause a denial of service via a crafted file.

Mitigation

Update Impact

Minimal update. May introduce new vulnerabilities or breaking changes.

Ecosystem	Package	Affected version	Patched versions
debian 11	audiofile	=0.3.6-5 \|\| >=0 <0.3.6-5+deb11u1	0.3.6-5+deb11u1
debian 14	audiofile	>=0 <0.3.6-6	0.3.6-6
debian 12	audiofile	=0.3.6-5 \|\| >=0 <0.3.6-5+deb12u1	0.3.6-5+deb12u1
debian 13	audiofile	>=0 <0.3.6-6	0.3.6-6

Aliases

1. CVE-2019-131472. NVD-2019-131473. OSV-DEBIAN-2019-131474. OSV-2019-131475. SECURITY-TRACKER-CVE-2019-13147

Does your application use this vulnerable software?

During the free trial, our tools assess your application, identify vulnerabilities, and provide recommendations for their remediation.