A heap buffer overflow vulnerability in msadpcm_decode_block of libsndfile 1.0.30 allows attackers to execute arbitrary code via a crafted WAV file.
CVSS Details
- CVSS 3.1 Base Score: 8.8
- CVSS 3.1 Vector: (CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H)
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Alma_linux | — | Upgrade libsndfileUpgrade libsndfile-devel | May 4, 2022 | Jul 20, 2021 |
| Amazon Linux Ami 2 | — | Upgrade libsndfileUpgrade libsndfile-develUpgrade libsndfile-utilsUpgrade libsndfile-debuginfo | Oct 7, 2021 | Jul 20, 2021 |
| Arch Linux | — | Upgrade to the latest version of Arch Linux | Jul 11, 2025 | Jul 20, 2021 |
| Centos_linux | — | Upgrade libsndfile-utilsUpgrade libsndfile-develUpgrade libsndfileUpgrade libsndfile-utils-debuginfoUpgrade libsndfile-debuginfoUpgrade libsndfile-debugsource | Aug 26, 2021 | Jul 20, 2021 |
| Debian | — | Upgrade libsndfile | Aug 3, 2021 | Jul 20, 2021 |
| Gentoo Linux | — | Upgrade media-libs/libsndfile. | Oct 2, 2023 | Jul 20, 2021 |
| Huawei Euleros 2_0_sp3 | — | Upgrade libsndfile | Oct 26, 2021 | Jul 20, 2021 |
| Huawei Euleros 2_0_sp5 | — | Upgrade libsndfile | Sep 29, 2021 | Jul 20, 2021 |
| Huawei Euleros 2_0_sp8 | — | Upgrade libsndfile-develUpgrade libsndfile | Nov 2, 2021 | Jul 20, 2021 |
| Huawei Euleros 2_0_sp9 | — | Upgrade libsndfile-utils-help | Nov 12, 2021 | Jul 20, 2021 |
| Oracle Solaris | — | Upgrade library/libsndfile to version 1.0.28-11.4.38.0.1.101.3 on Solaris 11.4 | Nov 17, 2021 | Jul 20, 2021 |
| Oracle_linux | — | Upgrade libsndfile-utilsUpgrade libsndfileUpgrade libsndfile-devel | Aug 25, 2021 | Jul 20, 2021 |
| Redhat_linux | — | No solution existsUpgrade libsndfile-develUpgrade libsndfileUpgrade libsndfile-debugsourceUpgrade libsndfile-utilsUpgrade libsndfile-debuginfoUpgrade libsndfile-utils-debuginfo | Aug 26, 2021 | Jul 20, 2021 |
| Rocky_linux | — | Upgrade libsndfile-develUpgrade libsndfile-debugsourceUpgrade libsndfile-debuginfoUpgrade libsndfile | May 5, 2022 | Jul 20, 2021 |
| Suse | — | Upgrade libsndfile-32bitUpgrade libsndfile-develUpgrade libsndfileUpgrade libsndfile1Upgrade libsndfile1-32bitUpgrade libsndfile-progs | Jul 28, 2021 | Jul 20, 2021 |
| Ubuntu | — | Upgrade libsndfile1Upgrade sndfile-programsUpgrade sndfile-programs (Ubuntu Pro)Upgrade libsndfile1 (Ubuntu Pro) | Jul 29, 2021 | Jul 20, 2021 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub