A heap buffer overflow vulnerability in msadpcm_decode_block of libsndfile 1.0.30 allows attackers to execute arbitrary code via a crafted WAV file.
CVSS Details
- CVSS 3.1 Base Score: 8.8
- CVSS 3.1 Vector: (CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H)
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Alma_linux | — | Upgrade libsndfileUpgrade libsndfile-devel | May 4, 2022 | Jul 20, 2021 |
| Amazon Linux Ami 2 | — | Upgrade libsndfile-debuginfoUpgrade libsndfile-utilsUpgrade libsndfileUpgrade libsndfile-devel | Oct 7, 2021 | Jul 20, 2021 |
| Arch Linux | — | Upgrade to the latest version of Arch Linux | Jul 11, 2025 | Jul 20, 2021 |
| Centos_linux | — | Upgrade libsndfile-debugsourceUpgrade libsndfile-debuginfoUpgrade libsndfile-utils-debuginfoUpgrade libsndfile-develUpgrade libsndfile-utilsUpgrade libsndfile | Aug 26, 2021 | Jul 20, 2021 |
| Debian | — | Upgrade libsndfile | Aug 3, 2021 | Jul 20, 2021 |
| Gentoo Linux | — | Upgrade media-libs/libsndfile. | Oct 2, 2023 | Jul 20, 2021 |
| Huawei Euleros 2_0_sp3 | — | Upgrade libsndfile | Oct 26, 2021 | Jul 20, 2021 |
| Huawei Euleros 2_0_sp5 | — | Upgrade libsndfile | Sep 29, 2021 | Jul 20, 2021 |
| Huawei Euleros 2_0_sp8 | — | Upgrade libsndfile-develUpgrade libsndfile | Nov 2, 2021 | Jul 20, 2021 |
| Huawei Euleros 2_0_sp9 | — | Upgrade libsndfile-utils-help | Nov 12, 2021 | Jul 20, 2021 |
| Oracle Solaris | — | Upgrade library/libsndfile to version 1.0.28-11.4.38.0.1.101.3 on Solaris 11.4 | Nov 17, 2021 | Jul 20, 2021 |
| Oracle_linux | — | Upgrade libsndfile-develUpgrade libsndfile-utilsUpgrade libsndfile | Aug 25, 2021 | Jul 20, 2021 |
| Redhat_linux | — | Upgrade libsndfile-debuginfoUpgrade libsndfile-utilsUpgrade libsndfile-utils-debuginfoUpgrade libsndfile-debugsourceUpgrade libsndfileNo solution existsUpgrade libsndfile-devel | Aug 26, 2021 | Jul 20, 2021 |
| Rocky_linux | — | Upgrade libsndfileUpgrade libsndfile-debuginfoUpgrade libsndfile-develUpgrade libsndfile-debugsource | May 5, 2022 | Jul 20, 2021 |
| Suse | — | Upgrade libsndfile-32bitUpgrade libsndfile-develUpgrade libsndfile1Upgrade libsndfile1-32bitUpgrade libsndfileUpgrade libsndfile-progs | Jul 28, 2021 | Jul 20, 2021 |
| Ubuntu | — | Upgrade sndfile-programs (Ubuntu Pro)Upgrade sndfile-programsUpgrade libsndfile1Upgrade libsndfile1 (Ubuntu Pro) | Jul 29, 2021 | Jul 20, 2021 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub