CVE-2007-6279

CRITICAL 9.3CVE-2007-6279 · Published 07/12/2007 · updated 16/06/2026

In short

CVE-2007-6279 is a CRITICAL (CVSS 9.3) vulnerability affecting libflac (flac).
Chance of exploitation in the next 30 days (EPSS): 4.0%, higher than 90.5% of all vulnerabilities.
No patched version is listed yet: follow the vendor's advisory in References.

Package	Affected versions	Patched versions
libflac flac	`≤ 1.2`	No fix yet

Description

Multiple double free vulnerabilities in Free Lossless Audio Codec (FLAC) libFLAC before 1.2.1 allow user-assisted remote attackers to execute arbitrary code via malformed (1) Seektable values or (2) Seektable Data Offsets in a .FLAC file.

References

research.eeye.com/html/advisories/published/AD20071115.html
securityreason.com/securityalert/3423
kb.cert.org/vuls/id/544656 · Patch
securityfocus.com/archive/1/483765/100/200/threaded
securitytracker.com/id · Patch

More vulnerabilities in libflac

See all →

Running one of these products? Scan your site to see whether it exposes a vulnerable version.

Scan my site free

Package

Affected versions

Patched versions

libflac

flac

≤ 1.2

No fix yet

More vulnerabilities in libflac

See all →