A heap buffer overflow vulnerability in msadpcm_decode_block of libsndfile 1.0.30 allows attackers to execute arbitrary code via a crafted WAV file.
CVSS Details
- CVSS 3.1 Base Score: 8.8
- CVSS 3.1 Vector: (CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H)
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Alma_linux | — | Upgrade libsndfileUpgrade libsndfile-devel | May 4, 2022 | Jul 20, 2021 |
| Amazon Linux Ami 2 | — | Upgrade libsndfile-debuginfoUpgrade libsndfile-utilsUpgrade libsndfileUpgrade libsndfile-devel | Oct 7, 2021 | Jul 20, 2021 |
| Arch Linux | — | Upgrade to the latest version of Arch Linux | Jul 11, 2025 | Jul 20, 2021 |
| Centos_linux | — | Upgrade libsndfile-debuginfoUpgrade libsndfile-utils-debuginfoUpgrade libsndfile-debugsourceUpgrade libsndfile-develUpgrade libsndfileUpgrade libsndfile-utils | Aug 26, 2021 | Jul 20, 2021 |
| Debian | — | Upgrade libsndfile | Aug 3, 2021 | Jul 20, 2021 |
| Gentoo Linux | — | Upgrade media-libs/libsndfile. | Oct 2, 2023 | Jul 20, 2021 |
| Huawei Euleros 2_0_sp3 | — | Upgrade libsndfile | Oct 26, 2021 | Jul 20, 2021 |
| Huawei Euleros 2_0_sp5 | — | Upgrade libsndfile | Sep 29, 2021 | Jul 20, 2021 |
| Huawei Euleros 2_0_sp8 | — | Upgrade libsndfile-develUpgrade libsndfile | Nov 2, 2021 | Jul 20, 2021 |
| Huawei Euleros 2_0_sp9 | — | Upgrade libsndfile-utils-help | Nov 12, 2021 | Jul 20, 2021 |
| Oracle Solaris | — | Upgrade library/libsndfile to version 1.0.28-11.4.38.0.1.101.3 on Solaris 11.4 | Nov 17, 2021 | Jul 20, 2021 |
| Oracle_linux | — | Upgrade libsndfile-develUpgrade libsndfileUpgrade libsndfile-utils | Aug 25, 2021 | Jul 20, 2021 |
| Redhat_linux | — | Upgrade libsndfile-utilsUpgrade libsndfile-debuginfoUpgrade libsndfile-utils-debuginfoUpgrade libsndfileUpgrade libsndfile-debugsourceUpgrade libsndfile-develNo solution exists | Aug 26, 2021 | Jul 20, 2021 |
| Rocky_linux | — | Upgrade libsndfileUpgrade libsndfile-debuginfoUpgrade libsndfile-develUpgrade libsndfile-debugsource | May 5, 2022 | Jul 20, 2021 |
| Suse | — | Upgrade libsndfile1-32bitUpgrade libsndfile-progsUpgrade libsndfileUpgrade libsndfile1Upgrade libsndfile-develUpgrade libsndfile-32bit | Jul 28, 2021 | Jul 20, 2021 |
| Ubuntu | — | Upgrade libsndfile1Upgrade sndfile-programs (Ubuntu Pro)Upgrade sndfile-programsUpgrade libsndfile1 (Ubuntu Pro) | Jul 29, 2021 | Jul 20, 2021 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub