CVE-2021-3246

概要

参考情報

• libsndfile/libsndfile · Exploit
• lists.debian.org/debian-lts-announce/2021/07/msg00024.html · Mailing List
• lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/DLUDCEMMPRA3IYYYHVZUOUZXI65FU37V
• lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/T7LNW4AVDVL3BU3N3KGVFLTYFASBVCIF
• security.gentoo.org/glsa/202309-11
• debian.org/security/2021/dsa-4947 · Third Party Advisory

libsndfile のその他の脆弱性

• CVE-2026-37555高 7.5An issue was discovered in libsndfile 1.2.2 IMA ADPCM codec. The AIFF code path (line 241) was fixed with (sf_count_t) cast, but the WAV cod…
• CVE-2025-56226中 5.3Libsndfile <=1.2.2 contains a memory leak vulnerability in the mpeg_l3_encoder_init() function within the mpeg_l3_encode.c file.
• CVE-2025-52194高 7.5A buffer overflow vulnerability exists in libsndfile version 1.2.2 and potentially earlier versions when processing malformed IRCAM audio fi…
• CVE-2024-50613中 6.5libsndfile through 1.2.2 has a reachable assertion, that may lead to application exit, in mpeg_l3_encode.c mpeg_l3_encoder_close.
• CVE-2024-50612中 5.5libsndfile through 1.2.2 has an ogg_vorbis.c vorbis_analysis_wrote out-of-bounds read.