CVE-2017-8363

概要

参考情報

• blogs.gentoo.org/ago/2017/04/29/libsndfile-heap-based-buffer-overflow-in-flac_buffer_copy-flac-c · Patch
• lists.debian.org/debian-lts-announce/2018/12/msg00016.html · Mailing List
• security.gentoo.org/glsa/201811-23 · Third Party Advisory

libsndfile のその他の脆弱性

• CVE-2026-37555高 7.5An issue was discovered in libsndfile 1.2.2 IMA ADPCM codec. The AIFF code path (line 241) was fixed with (sf_count_t) cast, but the WAV cod…
• CVE-2025-56226中 5.3Libsndfile <=1.2.2 contains a memory leak vulnerability in the mpeg_l3_encoder_init() function within the mpeg_l3_encode.c file.
• CVE-2025-52194高 7.5A buffer overflow vulnerability exists in libsndfile version 1.2.2 and potentially earlier versions when processing malformed IRCAM audio fi…
• CVE-2024-50613中 6.5libsndfile through 1.2.2 has a reachable assertion, that may lead to application exit, in mpeg_l3_encode.c mpeg_l3_encoder_close.
• CVE-2024-50612中 5.5libsndfile through 1.2.2 has an ogg_vorbis.c vorbis_analysis_wrote out-of-bounds read.