libsndfile through 1.2.2 has an ogg_vorbis.c vorbis_analysis_wrote out-of-bounds read.
CVSS Details
- CVSS 3.1 Base Score: 5.5
- CVSS 3.1 Vector: (CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H)
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Alma_linux | — | Upgrade libsndfile-utilsUpgrade libsndfileUpgrade libsndfile-devel | Dec 19, 2024 | Oct 27, 2024 |
| Alpine Linux | — | Upgrade libsndfile | Aug 8, 2025 | Oct 27, 2024 |
| Amazon_linux_2023 | — | Upgrade libsndfileUpgrade libsndfile-debugsourceUpgrade libsndfile-debuginfoUpgrade libsndfile-utils-debuginfoUpgrade libsndfile-develUpgrade libsndfile-utils | Mar 27, 2025 | Oct 27, 2024 |
| Debian | — | Upgrade libsndfile | May 15, 2025 | Oct 27, 2024 |
| Oracle_linux | — | Upgrade libsndfile-develUpgrade libsndfileUpgrade libsndfile-utils | Dec 18, 2024 | Oct 27, 2024 |
| Redhat_linux | — | Upgrade libsndfile-debuginfoNo solution existsUpgrade libsndfile-debugsourceUpgrade libsndfile-utils-debuginfoUpgrade libsndfile-develUpgrade libsndfile-utilsUpgrade libsndfile | Feb 10, 2025 | Oct 27, 2024 |
| Rocky_linux | — | Upgrade libsndfile-utilsUpgrade libsndfile-develUpgrade libsndfileUpgrade libsndfile-debugsourceUpgrade libsndfile-utils-debuginfoUpgrade libsndfile-debuginfo | Feb 9, 2026 | Mar 17, 2025 |
| Ubuntu | — | Upgrade libsndfile1 (Ubuntu Pro)Upgrade sndfile-programsUpgrade sndfile-programs (Ubuntu Pro)Upgrade libsndfile1 | Feb 14, 2025 | Oct 27, 2024 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub