CVE-2017-7742

概要

参考情報

• blogs.gentoo.org/ago/2017/04/11/libsndfile-invalid-memory-read-and-invalid-memory-write-in · Exploit
• erikd/libsndfile commit 60b2343 · Patch
• security.gentoo.org/glsa/201707-04

libsndfile のその他の脆弱性

• CVE-2026-37555高 7.5An issue was discovered in libsndfile 1.2.2 IMA ADPCM codec. The AIFF code path (line 241) was fixed with (sf_count_t) cast, but the WAV cod…
• CVE-2025-56226中 5.3Libsndfile <=1.2.2 contains a memory leak vulnerability in the mpeg_l3_encoder_init() function within the mpeg_l3_encode.c file.
• CVE-2025-52194高 7.5A buffer overflow vulnerability exists in libsndfile version 1.2.2 and potentially earlier versions when processing malformed IRCAM audio fi…
• CVE-2024-50613中 6.5libsndfile through 1.2.2 has a reachable assertion, that may lead to application exit, in mpeg_l3_encode.c mpeg_l3_encoder_close.
• CVE-2024-50612中 5.5libsndfile through 1.2.2 has an ogg_vorbis.c vorbis_analysis_wrote out-of-bounds read.