libsndfile through 1.2.2 has an ogg_vorbis.c vorbis_analysis_wrote out-of-bounds read.
CVSS Details
- CVSS 3.1 Base Score: 5.5
- CVSS 3.1 Vector: (CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H)
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Alma_linux | — | Upgrade libsndfile-utilsUpgrade libsndfile-develUpgrade libsndfile | Dec 19, 2024 | Oct 27, 2024 |
| Alpine Linux | — | Upgrade libsndfile | Aug 8, 2025 | Oct 27, 2024 |
| Amazon_linux_2023 | — | Upgrade libsndfileUpgrade libsndfile-debugsourceUpgrade libsndfile-debuginfoUpgrade libsndfile-develUpgrade libsndfile-utils-debuginfoUpgrade libsndfile-utils | Mar 27, 2025 | Oct 27, 2024 |
| Debian | — | Upgrade libsndfile | May 15, 2025 | Oct 27, 2024 |
| Oracle_linux | — | Upgrade libsndfile-develUpgrade libsndfileUpgrade libsndfile-utils | Dec 18, 2024 | Oct 27, 2024 |
| Redhat_linux | — | Upgrade libsndfile-utilsUpgrade libsndfileUpgrade libsndfile-develNo solution existsUpgrade libsndfile-utils-debuginfoUpgrade libsndfile-debugsourceUpgrade libsndfile-debuginfo | Feb 10, 2025 | Oct 27, 2024 |
| Rocky_linux | — | Upgrade libsndfile-utilsUpgrade libsndfileUpgrade libsndfile-debuginfoUpgrade libsndfile-utils-debuginfoUpgrade libsndfile-develUpgrade libsndfile-debugsource | Feb 9, 2026 | Mar 17, 2025 |
| Ubuntu | — | Upgrade sndfile-programs (Ubuntu Pro)Upgrade libsndfile1Upgrade libsndfile1 (Ubuntu Pro)Upgrade sndfile-programs | Feb 14, 2025 | Oct 27, 2024 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub