CVE-2017-6831

Name of the Vulnerable Software and Affected Versions Audio File Library (aka audiofile) versions 0.2.7 through 0.3.6

Description The issue is related to a heap-based buffer overflow in the decodeBlockWAVE function in IMA.cpp. This allows remote attackers to cause a denial of service (crash) via a crafted file.

Recommendations For versions 0.2.7 through 0.3.6, consider disabling the decodeBlockWAVE function in IMA.cpp to prevent exploitation until a patch is available. At the moment, there is no information about a newer version that contains a fix for this vulnerability.