CVE-2014-9756

概要

参考情報

• lists.opensuse.org/opensuse-updates/2015-11/msg00077.html · Mailing List
• lists.opensuse.org/opensuse-updates/2015-11/msg00145.html · Mailing List
• openwall.com/lists/oss-security/2014/12/24/3 · Mailing List
• openwall.com/lists/oss-security/2015/11/03/9 · Mailing List
• ubuntu.com/usn/USN-2832-1 · Third Party Advisory
• erikd/libsndfile commit 725c7db · Patch
• erikd/libsndfile · Exploit

libsndfile のその他の脆弱性

• CVE-2026-37555高 7.5An issue was discovered in libsndfile 1.2.2 IMA ADPCM codec. The AIFF code path (line 241) was fixed with (sf_count_t) cast, but the WAV cod…
• CVE-2025-56226中 5.3Libsndfile <=1.2.2 contains a memory leak vulnerability in the mpeg_l3_encoder_init() function within the mpeg_l3_encode.c file.
• CVE-2025-52194高 7.5A buffer overflow vulnerability exists in libsndfile version 1.2.2 and potentially earlier versions when processing malformed IRCAM audio fi…
• CVE-2024-50613中 6.5libsndfile through 1.2.2 has a reachable assertion, that may lead to application exit, in mpeg_l3_encode.c mpeg_l3_encoder_close.
• CVE-2024-50612中 5.5libsndfile through 1.2.2 has an ogg_vorbis.c vorbis_analysis_wrote out-of-bounds read.