The TDStretch::acceptNewOverlapLength function in source/SoundTouch/TDStretch.cpp in SoundTouch 1.9.2 allows remote attackers to cause a denial of service (memory allocation error and application crash) via a crafted wav file.
CVSS Details
- CVSS 3.0 Base Score: 5.5
- CVSS 3.0 Vector: (CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H)
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Debian | — | Upgrade soundtouch | Jul 30, 2024 | Jul 27, 2017 |
| Huawei Euleros 2_0_sp2 | — | Upgrade soundtouch | Sep 16, 2021 | Jul 27, 2017 |
| Huawei Euleros 2_0_sp3 | — | Upgrade soundtouch | Apr 30, 2021 | Jul 27, 2017 |
| Huawei Euleros 2_0_sp5 | — | Upgrade soundtouch | Mar 24, 2021 | Jul 27, 2017 |
| Redhat_linux | — | No solution exists | Jul 9, 2025 | Jul 26, 2017 |
| Ubuntu | — | Upgrade soundstretch (Ubuntu Pro)Upgrade libsoundtouch0 (Ubuntu Pro)Upgrade libsoundtouch1 (Ubuntu Pro) | Mar 22, 2023 | Jul 27, 2017 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub