FLAT-XCUQH – Vulnerability | Fluid Attacks Database

Database

Description

libsndfile through 1.2.2 has a reachable assertion, that may lead to application exit, in mpeg_l3_encode.c mpeg_l3_encoder_close.

Mitigation

Update Impact

Minimal update. May introduce new vulnerabilities or breaking changes.

Ecosystem	Package	Affected version
debian 13	libsndfile	=1.2.2-2 \|\| =1.2.2-2+deb13u1 \|\| =1.2.2-3 \|\| =1.2.2-4
debian 11	libsndfile	=1.0.31-2 \|\| =1.0.31-2+deb11u1 \|\| =1.0.31-2+deb11u2 \|\| =1.1.0-1 \|\| =1.1.0-2 \|\| =1.1.0-3 \|\| =1.2.0-1 \|\| =1.2.2-1 \|\| =1.2.2-1+hurd.1 \|\| =1.2.2-1+hurd.2 \|\| =1.2.2-1+hurd.3 \|\| =1.2.2-2 \|\| =1.2.2-3 \|\| =1.2.2-4
debian 12	libsndfile	=1.2.0-1 \|\| =1.2.0-1+deb12u1 \|\| =1.2.2-1 \|\| =1.2.2-1+hurd.1 \|\| =1.2.2-1+hurd.2 \|\| =1.2.2-1+hurd.3 \|\| =1.2.2-2 \|\| =1.2.2-3 \|\| =1.2.2-4
debian 14	libsndfile	=1.2.2-2 \|\| =1.2.2-3 \|\| =1.2.2-4
rpm rhel10	libsndfile	-
rpm rhel8	libsndfile	-
rpm rhel7	libsndfile	-
rpm rhel9	libsndfile	-

Aliases

1. CVE-2024-506132. NVD-2024-506133. OSV-DEBIAN-2024-506134. OSV-2024-506135. SECURITY-TRACKER-CVE-2024-50613

Does your application use this vulnerable software?

During the free trial, our tools assess your application, identify vulnerabilities, and provide recommendations for their remediation.