libsndfile through 1.2.2 has an ogg_vorbis.c vorbis_analysis_wrote out-of-bounds read.
CVSS Details
- CVSS 3.1 Base Score: 5.5
- CVSS 3.1 Vector: (CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H)
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Alma_linux | — | Upgrade libsndfile-develUpgrade libsndfileUpgrade libsndfile-utils | Dec 19, 2024 | Oct 27, 2024 |
| Alpine Linux | — | Upgrade libsndfile | Aug 8, 2025 | Oct 27, 2024 |
| Amazon_linux_2023 | — | Upgrade libsndfileUpgrade libsndfile-debugsourceUpgrade libsndfile-debuginfoUpgrade libsndfile-develUpgrade libsndfile-utils-debuginfoUpgrade libsndfile-utils | Mar 27, 2025 | Oct 27, 2024 |
| Debian | — | Upgrade libsndfile | May 15, 2025 | Oct 27, 2024 |
| Oracle_linux | — | Upgrade libsndfileUpgrade libsndfile-develUpgrade libsndfile-utils | Dec 18, 2024 | Oct 27, 2024 |
| Redhat_linux | — | Upgrade libsndfile-debugsourceUpgrade libsndfile-debuginfoUpgrade libsndfile-utils-debuginfoNo solution existsUpgrade libsndfile-develUpgrade libsndfileUpgrade libsndfile-utils | Feb 10, 2025 | Oct 27, 2024 |
| Rocky_linux | — | Upgrade libsndfile-utilsUpgrade libsndfile-debugsourceUpgrade libsndfile-debuginfoUpgrade libsndfile-utils-debuginfoUpgrade libsndfile-develUpgrade libsndfile | Feb 9, 2026 | Mar 17, 2025 |
| Ubuntu | — | Upgrade sndfile-programsUpgrade libsndfile1 (Ubuntu Pro)Upgrade libsndfile1Upgrade sndfile-programs (Ubuntu Pro) | Feb 14, 2025 | Oct 27, 2024 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub