Flac Project

Records2All Threatist records

Exploited (KEV)0None in CISA KEV

CVSS critical0CVSS 9.0–10.0

CVSS high1CVSS 7.0–8.9

Exploited now

Flac Project records in CISA KEV

No Flac Project vulnerabilities are listed in CISA KEV.

Components

Products in the NVD configurations · select one to filter the records

Flac 2 records HIGH

Records

2 records in Flac · all components

TI-2020-14307 CVE-2020-22219 · GHSA-hvp4-qmrj-gvhf

Buffer Overflow vulnerability in function bitwriter_grow_ in flac before 1.4.0 allows…

HIGH 69

Buffer Overflow vulnerability in function bitwriter_grow_ in flac before 1.4.0 allows remote attackers to run arbitrary code via crafted input to the encoder.

CVSS 3.1HIGH 7.8 Local Low privileges No interaction EPSS 0.00794 Published 2023-08-22 Partial fix CWE-120

TI-2017-04620 CVE-2017-6888 · GHSA-fmrx-65vg-qvjw

An error in the "read_metadata_vorbiscomment_()" function (src/libFLAC/stream_decoder.c)…

LOW 28

An error in the "read_metadata_vorbiscomment_()" function (src/libFLAC/stream_decoder.c) in FLAC version 1.3.2 can be exploited to cause a memory leak via a specially crafted FLAC file.

CVSS 3.1MEDIUM 5.5 Local No auth User interaction EPSS 0.01336 Published 2018-04-25 No fix listed CWE-772

Open these records in search →

Critical	0
High	1
Medium	1
Low	0
No CVSS	0