Read the docs

Audiofile

Records20All Threatist records
Exploited (KEV)0None in CISA KEV
CVSS critical0CVSS 9.0–10.0
CVSS high5CVSS 7.0–8.9

Exploited now

Audiofile records in CISA KEV

No Audiofile vulnerabilities are listed in CISA KEV.

Components

Products in the NVD configurations · select one to filter the records

Records

20 records in Audiofile · all components

Priority LOW 34

The audiofile Audio File Library 0.3.6 has a NULL pointer dereference bug in ModuleState::setup in modules/ModuleState.cpp, which allows an attacker to cause a denial of service via a crafted caf file, as demonstrated by…

CVSS 3.0MEDIUM 6.5 Network No auth User interaction EPSS 0.03113 Published 2018-07-08 Partial fix CWE-476
Priority LOW 30

Heap-based buffer overflow in the Expand3To4Module::run function in libaudiofile/modules/SimpleModule.h in Audio File Library (aka audiofile) 0.3.6, 0.3.5, 0.3.4, 0.3.3, 0.3.2, 0.3.1, 0.3.0 allows remote attackers to cau…

CVSS 3.1MEDIUM 5.5 Local No auth User interaction EPSS 0.02986 Published 2017-03-20 Will not fix CWE-119
Priority LOW 30

Heap-based buffer overflow in the decodeBlockWAVE function in IMA.cpp in Audio File Library (aka audiofile) 0.3.6, 0.3.5, 0.3.4, 0.3.3, 0.3.2, 0.3.1, 0.3.0 and 0.2.7 allows remote attackers to cause a denial of service (…

CVSS 3.1MEDIUM 5.5 Local No auth User interaction EPSS 0.03091 Published 2017-03-20 Will not fix CWE-119
Open these records in search →