Mega-nerd

Libsndfile

7 Schwachstellen gefunden.

Hinweis: Diese Liste kann unvollständig sein. Daten werden ohne Gewähr im Ursprungsformat bereitgestellt.
9.3

CVE-2015-7805

Exploit
  • EPSS 13.29%
  • Veröffentlicht 17.11.2015 15:59:12
  • Zuletzt bearbeitet 06.05.2026 22:30:45

Heap-based buffer overflow in libsndfile 1.0.25 allows remote attackers to have unspecified impact via the headindex value in the header in an AIFF file.

6.8

CVE-2011-2696

  • EPSS 4.65%
  • Veröffentlicht 27.07.2011 02:55:02
  • Zuletzt bearbeitet 16.06.2026 23:31:49

Integer overflow in libsndfile before 1.0.25 allows remote attackers to cause a denial of service (application crash) or possibly execute arbitrary code via a crafted PARIS Audio Format (PAF) file that triggers a heap-based buffer overflow.

4.3

CVE-2009-4835

  • EPSS 1.44%
  • Veröffentlicht 06.05.2010 12:47:23
  • Zuletzt bearbeitet 16.06.2026 23:14:26

The (1) htk_read_header, (2) alaw_init, (3) ulaw_init, (4) pcm_init, (5) float32_init, and (6) sds_read_header functions in libsndfile 1.0.20 allow context-dependent attackers to cause a denial of service (divide-by-zero error and application crash) ...

9.3

CVE-2009-1791

  • EPSS 6.53%
  • Veröffentlicht 26.05.2009 17:30:02
  • Zuletzt bearbeitet 16.06.2026 23:08:04

Heap-based buffer overflow in aiff_read_header in libsndfile 1.0.15 through 1.0.19, as used in Winamp 5.552 and possibly other media programs, allows remote attackers to cause a denial of service (application crash) and possibly execute arbitrary cod...

9.3

CVE-2009-1788

Exploit
  • EPSS 8.23%
  • Veröffentlicht 26.05.2009 16:30:02
  • Zuletzt bearbeitet 16.06.2026 23:08:03

Heap-based buffer overflow in voc_read_header in libsndfile 1.0.15 through 1.0.19, as used in Winamp 5.552 and possibly other media programs, allows remote attackers to cause a denial of service (application crash) and possibly execute arbitrary code...

9.3

CVE-2009-0186

  • EPSS 3.61%
  • Veröffentlicht 05.03.2009 02:30:00
  • Zuletzt bearbeitet 16.06.2026 23:04:27

Integer overflow in libsndfile 1.0.18, as used in Winamp and other products, allows context-dependent attackers to execute arbitrary code via crafted description chunks in a CAF audio file, leading to a heap-based buffer overflow.

7.5

CVE-2007-4974

  • EPSS 4.49%
  • Veröffentlicht 19.09.2007 17:17:00
  • Zuletzt bearbeitet 16.06.2026 22:45:11

Heap-based buffer overflow in the flac_buffer_copy function in libsndfile 1.0.17 and earlier might allow remote attackers to execute arbitrary code via a FLAC file with crafted PCM data containing a block with a size that exceeds the previous block s...