PT-2023-11508

CVE-2020-18781

Published

2023-08-22

Updated

2025-01-28

Description by

CVSS 3.1

5.5

Medium

MetricsAV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H

Name of the Vulnerable Software and Affected Versions audiofile version 0.3.6

Description The issue is related to a heap buffer overflow vulnerability in the FilePOSIX::read function in File.cpp. This can cause a denial-of-service when a crafted wav file is used, and the bug can be triggered by the executable sfconvert.

Recommendations For audiofile version 0.3.6, at the moment, there is no information about a newer version that contains a fix for this vulnerability.

Exploitability

Exploit

Impacts

Researchers

92Wyunchao

Vendors

Affected products

Weakness enumeration

CWE-787: Out-of-bounds Write

Related identifiers

CVE-2020-18781

AZL-28072