Vendors / Symonics Records 15 All Threatist records
Exploited (KEV) 0 None in CISA KEV
CVSS critical 4
CVSS high 6
Exploited now Symonics records in CISA KEV No Symonics vulnerabilities are listed in CISA KEV.
Components Products in the NVD configurations · select one to filter the records Priority MEDIUM 47
treeRead in hdf/btree.c in libmysofa before 0.7 does not properly validate multiplications and additions.
CVSS 3.0 CRITICAL 9.8· Network · No auth · No interaction · EPSS 0.02368 · Published 2019-03-31 · No fix listed CWE-20
Priority MEDIUM 45
Symonics libmysofa 0.7 has an invalid write in readOHDRHeaderMessageDataLayout in hdf/dataobject.c.
CVSS 3.1 CRITICAL 9.8· Network · No auth · No interaction · EPSS 0.0153 · Published 2019-09-08 · No fix listed CWE-787
Priority MEDIUM 45
Symonics libmysofa 0.7 has a NULL pointer dereference in getHrtf in hrtf/reader.c.
CVSS 3.1 CRITICAL 9.8· Network · No auth · No interaction · EPSS 0.0153 · Published 2019-09-08 · No fix listed CWE-476
Priority MEDIUM 44
libmysofa is vulnerable to Heap-based Buffer Overflow
CVSS 3.1 CRITICAL 9.8· Network · No auth · No interaction · EPSS 0.01069 · Published 2021-10-29 · Fixed in 1.2.1 CWE-122
Priority MEDIUM 43
Buffer overflow in readDataVar in hdf/dataobject.c in Symonics libmysofa 0.5 - 1.1 allows attackers to execute arbitrary code via a crafted SOFA.
CVSS 3.1 HIGH 8.8· Network · No auth · User interaction · EPSS 0.02372 · Published 2021-02-08 · No fix listed CWE-120
Priority MEDIUM 41
libmysofa 0.9.1 has a stack-based buffer overflow in readDataVar in hdf/dataobject.c during the reading of a header message attribute.
CVSS 3.1 HIGH 8.8· Network · No auth · User interaction · EPSS 0.01682 · Published 2020-01-13 · No fix listed CWE-787
Priority MEDIUM 41
hdf/dataobject.c in libmysofa before 0.8 has an uninitialized use of memory, as demonstrated by mysofa2json.
CVSS 3.1 HIGH 8.8· Network · No auth · User interaction · EPSS 0.01453 · Published 2019-12-29 · No fix listed CWE-665
Priority LOW 36
Symonics libmysofa 0.7 has an invalid read in getDimension in hrtf/reader.c.
CVSS 3.1 HIGH 7.5· Network · No auth · No interaction · EPSS 0.01347 · Published 2019-09-08 · No fix listed CWE-125
Priority LOW 36
Symonics libmysofa 0.7 has an invalid read in readOHDRHeaderMessageDataLayout in hdf/dataobject.c.
CVSS 3.1 HIGH 7.5· Network · No auth · No interaction · EPSS 0.01347 · Published 2019-09-08 · No fix listed CWE-125
Priority LOW 36
Symonics libmysofa 0.7 has an out-of-bounds read in directblockRead in hdf/fractalhead.c.
CVSS 3.1 HIGH 7.5· Network · No auth · No interaction · EPSS 0.01347 · Published 2019-09-08 · No fix listed CWE-125
Priority LOW 33
libmysofa before 2019-11-24 does not properly restrict recursive function calls, as demonstrated by reports of stack consumption in readOHDRHeaderMessageDatatype in dataobject.c and directblockRead in fractalhead.c.
CVSS 3.1 MEDIUM 6.5· Network · No auth · User interaction · EPSS 0.01953 · Published 2019-12-27 · No fix listed CWE-787
Priority LOW 31
Incorrect handling of input data in mysofa_resampler_reset_mem function in the libmysofa library 0.5 - 1.1 will lead to heap buffer overflow and overwriting large memory block.
CVSS 3.1 MEDIUM 6.5· Network · No auth · User interaction · EPSS 0.01249 · Published 2021-02-08 · No fix listed CWE-787
Priority LOW 31
Incorrect handling of input data in loudness function in the libmysofa library 0.5 - 1.1 will lead to heap buffer overflow and access to unallocated memory block.
CVSS 3.1 MEDIUM 6.5· Network · No auth · User interaction · EPSS 0.01249 · Published 2021-02-08 · No fix listed CWE-125
Priority LOW 31
Incorrect handling of input data in changeAttribute function in the libmysofa library 0.5 - 1.1 will lead to NULL pointer dereference and segmentation fault error in case of restrictive memory protection or near NULL poi…
CVSS 3.1 MEDIUM 6.5· Network · No auth · User interaction · EPSS 0.01177 · Published 2021-02-08 · No fix listed CWE-476
Priority LOW 31
Incorrect handling of input data in verifyAttribute function in the libmysofa library 0.5 - 1.1 will lead to NULL pointer dereference and segmentation fault error in case of restrictive memory protection or near NULL poi…
CVSS 3.1 MEDIUM 6.5· Network · No auth · User interaction · EPSS 0.01168 · Published 2021-02-08 · No fix listed CWE-476
Open these records in search → All records by CVSS severity
4 6 5 0 0
THREATIST.IORead the docs