Out-of-bounds read In libsndfile
Description
Integer overflow in libsndfile 1.0.18, as used in Winamp and other products, allows context-dependent attackers to execute arbitrary code via crafted description chunks in a CAF audio file, leading to a heap-based buffer overflow.
Mitigation
Update Impact
Minimal update. May introduce new vulnerabilities or breaking changes.
Ecosystem | Package | Affected version | Patched versions |
|---|---|---|---|
 debian 12 | 1.0.19-1 | ||
debian 11 | 1.0.19-1 | ||
debian 13 | 1.0.19-1 | ||
debian 14 | 1.0.19-1 |
Aliases
1. 2. 3. 4. 5.