An error in the "read_metadata_vorbiscomment_()" function (src/libFLAC/stream_decoder.c) in FLAC version 1.3.2 can be exploited to cause a memory leak via a specially crafted FLAC file.
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Alpine Linux | — | Upgrade flac | Aug 22, 2024 | Apr 25, 2018 |
| Debian | — | Upgrade flac | Jan 5, 2021 | Apr 25, 2018 |
| Oracle Solaris | — | Upgrade codec/flac to version 1.3.2-11.4.3.0.1.4.0 on Solaris 11.4Upgrade system/library/accountsservice to version 0.6.40-11.4.3.0.1.4.0 on Solaris 11.4 | Nov 19, 2018 | Apr 25, 2018 |
| Suse | — | Upgrade flac-develUpgrade flac-devel-32bitUpgrade libflac8Upgrade flac-docUpgrade libflac8-32bitUpgrade libflac-6Upgrade flacUpgrade libflac-6-32bit | May 3, 2018 | Apr 25, 2018 |
| Ubuntu | — | Upgrade libflac++6 (Ubuntu Pro)Upgrade libflac++6v5Upgrade flac (Ubuntu Pro)Upgrade libflac8 (Ubuntu Pro)Upgrade libflac++6v5 (Ubuntu Pro)Upgrade libflac8Upgrade flac | Nov 22, 2022 | Apr 25, 2018 |
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub