A heap buffer overflow vulnerability in msadpcm_decode_block of libsndfile 1.0.30 allows attackers to execute arbitrary code via a crafted WAV file.
CVSS Details
- CVSS 3.1 Base Score: 8.8
- CVSS 3.1 Vector: (CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H)
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Alma_linux | — | Upgrade libsndfile-develUpgrade libsndfile | May 4, 2022 | Jul 20, 2021 |
| Amazon Linux Ami 2 | — | Upgrade libsndfile-debuginfoUpgrade libsndfileUpgrade libsndfile-utilsUpgrade libsndfile-devel | Oct 7, 2021 | Jul 20, 2021 |
| Arch Linux | — | Upgrade to the latest version of Arch Linux | Jul 11, 2025 | Jul 20, 2021 |
| Centos_linux | — | Upgrade libsndfile-debugsourceUpgrade libsndfile-utils-debuginfoUpgrade libsndfile-debuginfoUpgrade libsndfile-utilsUpgrade libsndfile-develUpgrade libsndfile | Aug 26, 2021 | Jul 20, 2021 |
| Debian | — | Upgrade libsndfile | Aug 3, 2021 | Jul 20, 2021 |
| Gentoo Linux | — | Upgrade media-libs/libsndfile. | Oct 2, 2023 | Jul 20, 2021 |
| Huawei Euleros 2_0_sp3 | — | Upgrade libsndfile | Oct 26, 2021 | Jul 20, 2021 |
| Huawei Euleros 2_0_sp5 | — | Upgrade libsndfile | Sep 29, 2021 | Jul 20, 2021 |
| Huawei Euleros 2_0_sp8 | — | Upgrade libsndfile-develUpgrade libsndfile | Nov 2, 2021 | Jul 20, 2021 |
| Huawei Euleros 2_0_sp9 | — | Upgrade libsndfile-utils-help | Nov 12, 2021 | Jul 20, 2021 |
| Oracle Solaris | — | Upgrade library/libsndfile to version 1.0.28-11.4.38.0.1.101.3 on Solaris 11.4 | Nov 17, 2021 | Jul 20, 2021 |
| Oracle_linux | — | Upgrade libsndfile-develUpgrade libsndfileUpgrade libsndfile-utils | Aug 25, 2021 | Jul 20, 2021 |
| Redhat_linux | — | Upgrade libsndfile-utilsUpgrade libsndfile-utils-debuginfoUpgrade libsndfile-debuginfoUpgrade libsndfile-develNo solution existsUpgrade libsndfileUpgrade libsndfile-debugsource | Aug 26, 2021 | Jul 20, 2021 |
| Rocky_linux | — | Upgrade libsndfile-develUpgrade libsndfile-debugsourceUpgrade libsndfile-debuginfoUpgrade libsndfile | May 5, 2022 | Jul 20, 2021 |
| Suse | — | Upgrade libsndfile-progsUpgrade libsndfileUpgrade libsndfile1-32bitUpgrade libsndfile1Upgrade libsndfile-develUpgrade libsndfile-32bit | Jul 28, 2021 | Jul 20, 2021 |
| Ubuntu | — | Upgrade libsndfile1Upgrade sndfile-programs (Ubuntu Pro)Upgrade sndfile-programsUpgrade libsndfile1 (Ubuntu Pro) | Jul 29, 2021 | Jul 20, 2021 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub