Multiple signed integers overflow in function au_read_header in src/au.c and in functions mat4_open and mat4_read_header in src/mat4.c in Libsndfile, allows an attacker to cause Denial of Service or other unspecified impacts.
CVSS Details
- CVSS 3.1 Base Score: 7.8
- CVSS 3.1 Vector: (CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H)
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Alma_linux | — | Upgrade libsndfile-develUpgrade libsndfile-utilsUpgrade libsndfile | May 8, 2024 | Jul 18, 2023 |
| Amazon Linux Ami 2 | — | Upgrade libsndfile-debuginfoUpgrade libsndfileUpgrade libsndfile-utilsUpgrade libsndfile-devel | Jan 10, 2024 | Jul 18, 2023 |
| Amazon_linux_2023 | — | Upgrade libsndfile-utilsUpgrade libsndfile-utils-debuginfoUpgrade libsndfile-debuginfoUpgrade libsndfile-debugsourceUpgrade libsndfileUpgrade libsndfile-devel | Feb 17, 2025 | Sep 13, 2023 |
| Debian | — | Upgrade libsndfile | May 15, 2025 | Jul 18, 2023 |
| Freebsd | — | Upgrade libsndfile | Nov 9, 2023 | Nov 8, 2023 |
| Huawei Euleros 2_0_sp10 | — | Upgrade libsndfile-utils-help | Jan 10, 2024 | Jul 18, 2023 |
| Huawei Euleros 2_0_sp9 | — | Upgrade libsndfile-utils-help | Jan 10, 2024 | Jul 18, 2023 |
| Oracle_linux | — | Upgrade libsndfile-utilsUpgrade libsndfile-develUpgrade libsndfile | May 8, 2024 | Sep 13, 2023 |
| Redhat_linux | — | Upgrade libsndfile-develUpgrade libsndfile-utils-debuginfoUpgrade libsndfileUpgrade libsndfile-utilsUpgrade libsndfile-debugsourceUpgrade libsndfile-debuginfo | May 1, 2024 | Jul 18, 2023 |
| Rocky_linux | — | Upgrade libsndfile-debugsourceUpgrade libsndfile-develUpgrade libsndfile-utils-debuginfoUpgrade libsndfileUpgrade libsndfile-debuginfoUpgrade libsndfile-utils | May 8, 2025 | Jul 18, 2023 |
| Suse | — | Upgrade libsndfile-progsUpgrade libsndfile1Upgrade libsndfile1-32bitUpgrade libsndfile-devel | Nov 2, 2023 | Jul 18, 2023 |
| Ubuntu | — | Upgrade libsndfile1Upgrade libsndfile1 (Ubuntu Pro)Upgrade sndfile-programs (Ubuntu Pro)Upgrade sndfile-programs | Nov 3, 2023 | Jul 18, 2023 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub