libsndfile through 1.2.2 has an ogg_vorbis.c vorbis_analysis_wrote out-of-bounds read.
CVSS Details
- CVSS 3.1 Base Score: 5.5
- CVSS 3.1 Vector: (CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H)
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Alma_linux | — | Upgrade libsndfileUpgrade libsndfile-develUpgrade libsndfile-utils | Dec 19, 2024 | Oct 27, 2024 |
| Alpine Linux | — | Upgrade libsndfile | Aug 8, 2025 | Oct 27, 2024 |
| Amazon_linux_2023 | — | Upgrade libsndfile-debugsourceUpgrade libsndfileUpgrade libsndfile-debuginfoUpgrade libsndfile-utils-debuginfoUpgrade libsndfile-utilsUpgrade libsndfile-devel | Mar 27, 2025 | Oct 27, 2024 |
| Debian | — | Upgrade libsndfile | May 15, 2025 | Oct 27, 2024 |
| Oracle_linux | — | Upgrade libsndfile-develUpgrade libsndfileUpgrade libsndfile-utils | Dec 18, 2024 | Oct 27, 2024 |
| Redhat_linux | — | Upgrade libsndfileUpgrade libsndfile-develUpgrade libsndfile-utilsUpgrade libsndfile-debugsourceUpgrade libsndfile-debuginfoNo solution existsUpgrade libsndfile-utils-debuginfo | Feb 10, 2025 | Oct 27, 2024 |
| Rocky_linux | — | Upgrade libsndfile-develUpgrade libsndfileUpgrade libsndfile-debuginfoUpgrade libsndfile-debugsourceUpgrade libsndfile-utils-debuginfoUpgrade libsndfile-utils | Feb 9, 2026 | Mar 17, 2025 |
| Ubuntu | — | Upgrade sndfile-programs (Ubuntu Pro)Upgrade libsndfile1Upgrade sndfile-programsUpgrade libsndfile1 (Ubuntu Pro) | Feb 14, 2025 | Oct 27, 2024 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub