CVE-2017-9258

Name of the Vulnerable Software and Affected Versions SoundTouch version 1.9.2

Description The issue allows remote attackers to cause a denial of service, resulting in an infinite loop and CPU consumption, via a crafted wav file. This is due to a problem in the TDStretch::processSamples function in the source/SoundTouch/TDStretch.cpp file.

Recommendations For version 1.9.2, consider disabling the TDStretch::processSamples function as a temporary workaround until a patch is available. Restrict access to processing crafted wav files to minimize the risk of exploitation.