CVE-2021-3756

Description

References

• hoene/libmysofa commit 890400e · Patch
• huntr.dev/bounties/7ca8d9ea-e2a6-4294-af28-70260bb53bc1 · Exploit
• lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/PGQ45S4RH7MC42NHTAGOIHYR4C5IRTMZ
• lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/WGY7TAZX2M4NYXXGNHIBBKKN5XMSMKQ4

More vulnerabilities in libmysofa

• CVE-2020-36152HIGH 8.8Buffer overflow in readDataVar in hdf/dataobject.c in Symonics libmysofa 0.5 - 1.1 allows attackers to execute arbitrary code via a crafted …
• CVE-2020-36151MEDIUM 6.5Incorrect handling of input data in mysofa_resampler_reset_mem function in the libmysofa library 0.5 - 1.1 will lead to heap buffer overflow…
• CVE-2020-36150MEDIUM 6.5Incorrect handling of input data in loudness function in the libmysofa library 0.5 - 1.1 will lead to heap buffer overflow and access to una…
• CVE-2020-36149MEDIUM 6.5Incorrect handling of input data in changeAttribute function in the libmysofa library 0.5 - 1.1 will lead to NULL pointer dereference and se…
• CVE-2020-36148MEDIUM 6.5Incorrect handling of input data in verifyAttribute function in the libmysofa library 0.5 - 1.1 will lead to NULL pointer dereference and se…