PT-2021-22635
CVE-2021-39552
·
تاريخ النشر
2021-09-20
·
تاريخ التحديث
2021-09-24
الوصف من
CVSS 3.1
7.8
عاليةالمقاييسAV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H
Name of the Vulnerable Software and Affected Versions:
sela through 20200412
Description:
An issue was discovered in the
file::WavFile::readFromFile() function in wav file.c, which has a heap-based buffer overflow.Recommendations:
For sela through 20200412, consider disabling the
readFromFile() function as a temporary workaround until a patch is available. Restrict access to the wav file.c module to minimize the risk of exploitation. وجدت خطأً في الوصف؟ لديك ما تضيفه؟ لا تتردد في مراسلتنا 👾