PT-2023-11508

CVE-2020-18781

Publicado

2023-08-22

Atualizado

2025-01-28

Descrição por

CVSS 3.1

5.5

Média

MétricasAV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H

Name of the Vulnerable Software and Affected Versions audiofile version 0.3.6

Description The issue is related to a heap buffer overflow vulnerability in the FilePOSIX::read function in File.cpp. This can cause a denial-of-service when a crafted wav file is used, and the bug can be triggered by the executable sfconvert.

Recommendations For audiofile version 0.3.6, at the moment, there is no information about a newer version that contains a fix for this vulnerability.

Explorabilidade

Exploit

Impactos

Pesquisadores

92Wyunchao

Fornecedores

Produtos afetados

Enumeração de fraquezas

CWE-787: Out-of-bounds Write

Identificadores relacionados

CVE-2020-18781

AZL-28072