Buffer overflow in src/src_sinc.c in Secret Rabbit Code (aka SRC or libsamplerate) before 0.1.4, when "extreme low conversion ratios" are used, allows user-assisted attackers to have an unknown impact via a crafted audio file.
CVSS Details
- CVSS 3.1 Base Score: 7.8
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Debian | — | Upgrade libsamplerate | Jul 30, 2024 | Nov 10, 2008 |
| Gentoo Linux | — | Upgrade media-libs/libsamplerate. | Oct 30, 2017 | Nov 10, 2008 |
| Suse | — | Upgrade libsamplerate0Upgrade libsamplerate-develUpgrade libsamplerate-x86Upgrade libsamplerateUpgrade libsamplerate-32bit | Aug 9, 2024 | Jul 9, 2013 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub