A heap buffer overflow vulnerability in msadpcm_decode_block of libsndfile 1.0.30 allows attackers to execute arbitrary code via a crafted WAV file.
CVSS Details
- CVSS 3.1 Base Score: 8.8
- CVSS 3.1 Vector: (CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H)
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Alma_linux | — | Upgrade libsndfile-develUpgrade libsndfile | May 4, 2022 | Jul 20, 2021 |
| Amazon Linux Ami 2 | — | Upgrade libsndfile-debuginfoUpgrade libsndfile-utilsUpgrade libsndfile-develUpgrade libsndfile | Oct 7, 2021 | Jul 20, 2021 |
| Arch Linux | — | Upgrade to the latest version of Arch Linux | Jul 11, 2025 | Jul 20, 2021 |
| Centos_linux | — | Upgrade libsndfileUpgrade libsndfile-utilsUpgrade libsndfile-develUpgrade libsndfile-debugsourceUpgrade libsndfile-debuginfoUpgrade libsndfile-utils-debuginfo | Aug 26, 2021 | Jul 20, 2021 |
| Debian | — | Upgrade libsndfile | Aug 3, 2021 | Jul 20, 2021 |
| Gentoo Linux | — | Upgrade media-libs/libsndfile. | Oct 2, 2023 | Jul 20, 2021 |
| Huawei Euleros 2_0_sp3 | — | Upgrade libsndfile | Oct 26, 2021 | Jul 20, 2021 |
| Huawei Euleros 2_0_sp5 | — | Upgrade libsndfile | Sep 29, 2021 | Jul 20, 2021 |
| Huawei Euleros 2_0_sp8 | — | Upgrade libsndfileUpgrade libsndfile-devel | Nov 2, 2021 | Jul 20, 2021 |
| Huawei Euleros 2_0_sp9 | — | Upgrade libsndfile-utils-help | Nov 12, 2021 | Jul 20, 2021 |
| Oracle Solaris | — | Upgrade library/libsndfile to version 1.0.28-11.4.38.0.1.101.3 on Solaris 11.4 | Nov 17, 2021 | Jul 20, 2021 |
| Oracle_linux | — | Upgrade libsndfile-develUpgrade libsndfile-utilsUpgrade libsndfile | Aug 25, 2021 | Jul 20, 2021 |
| Redhat_linux | — | Upgrade libsndfile-debugsourceNo solution existsUpgrade libsndfile-develUpgrade libsndfileUpgrade libsndfile-debuginfoUpgrade libsndfile-utils-debuginfoUpgrade libsndfile-utils | Aug 26, 2021 | Jul 20, 2021 |
| Rocky_linux | — | Upgrade libsndfile-debuginfoUpgrade libsndfileUpgrade libsndfile-develUpgrade libsndfile-debugsource | May 5, 2022 | Jul 20, 2021 |
| Suse | — | Upgrade libsndfile-32bitUpgrade libsndfile-develUpgrade libsndfile-progsUpgrade libsndfile1Upgrade libsndfileUpgrade libsndfile1-32bit | Jul 28, 2021 | Jul 20, 2021 |
| Ubuntu | — | Upgrade sndfile-programsUpgrade sndfile-programs (Ubuntu Pro)Upgrade libsndfile1 (Ubuntu Pro)Upgrade libsndfile1 | Jul 29, 2021 | Jul 20, 2021 |
Prioritize with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub