Buffer Overflow vulnerability in function bitwriter_grow_ in flac before 1.4.0 allows remote attackers to run arbitrary code via crafted input to the encoder.
CVSS Details
- CVSS 3.1 Base Score: 7.8
- CVSS 3.1 Vector: (CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H)
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Alma_linux | — | Upgrade flac-develUpgrade flacUpgrade flac-libs | Sep 13, 2023 | Aug 22, 2023 |
| Alpine Linux | — | Upgrade flac | Mar 21, 2024 | Aug 22, 2023 |
| Amazon Linux Ami 2 | — | Upgrade flac-libsUpgrade flac-develUpgrade flacUpgrade flac-debuginfo | Oct 6, 2023 | Aug 22, 2023 |
| Centos_linux | — | Upgrade flac-debuginfoUpgrade flac-debugsourceUpgrade flac-libsUpgrade flac-libs-debuginfo | Sep 12, 2023 | Aug 22, 2023 |
| Debian | — | Upgrade flac | Sep 20, 2023 | Aug 22, 2023 |
| Huawei Euleros 2_0_sp10 | — | Upgrade flac-help | Jan 10, 2024 | Aug 22, 2023 |
| Huawei Euleros 2_0_sp8 | — | Upgrade flac-libs | Mar 13, 2024 | Aug 22, 2023 |
| Huawei Euleros 2_0_sp9 | — | Upgrade flac-help | Jan 10, 2024 | Aug 22, 2023 |
| Oracle_linux | — | Upgrade flac-libsUpgrade flacUpgrade flac-devel | Sep 13, 2023 | Aug 22, 2023 |
| Redhat_linux | — | Upgrade flac-libsUpgrade flacUpgrade flac-libs-debuginfoUpgrade flac-debugsourceUpgrade flac-develNo solution existsUpgrade flac-debuginfo | Sep 12, 2023 | Aug 22, 2023 |
| Rocky_linux | — | Upgrade flac-libs-debuginfoUpgrade flac-libsUpgrade flac-debugsourceUpgrade flac-debuginfoUpgrade flac-develUpgrade flac | Jun 29, 2026 | Jun 25, 2026 |
| Suse | — | Upgrade libflac8Upgrade libflac-6-32bitUpgrade flac-develUpgrade flac-docUpgrade flacUpgrade libflac8-32bitUpgrade flac-devel-32bitUpgrade libflac-6 | Aug 9, 2024 | Aug 22, 2023 |
| Ubuntu | — | Upgrade flacUpgrade libflac8Upgrade libflac8 (Ubuntu Pro)Upgrade flac (Ubuntu Pro) | Sep 18, 2023 | Aug 22, 2023 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub