CVE-2018-17095

Name of the Vulnerable Software and Affected Versions mpruett Audio File Library (aka audiofile) versions 0.3.0 through 0.3.6

Description A heap-based buffer overflow issue has been found in the Expand3To4Module::run function when running sfconvert, potentially leading to exploitation.

Recommendations For versions 0.3.0 through 0.3.6, consider disabling the Expand3To4Module::run function as a temporary workaround until a patch is available. At the moment, there is no information about a newer version that contains a fix for this vulnerability.