Buffer Overflow vulnerability in function bitwriter_grow_ in flac before 1.4.0 allows remote attackers to run arbitrary code via crafted input to the encoder.
CVSS Details
- CVSS 3.1 Base Score: 7.8
- CVSS 3.1 Vector: (CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H)
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Alma_linux | — | Upgrade flac-libsUpgrade flacUpgrade flac-devel | Sep 13, 2023 | Aug 22, 2023 |
| Alpine Linux | — | Upgrade flac | Mar 21, 2024 | Aug 22, 2023 |
| Amazon Linux Ami 2 | — | Upgrade flac-debuginfoUpgrade flacUpgrade flac-develUpgrade flac-libs | Oct 6, 2023 | Aug 22, 2023 |
| Centos_linux | — | Upgrade flac-libsUpgrade flac-debugsourceUpgrade flac-libs-debuginfoUpgrade flac-debuginfo | Sep 12, 2023 | Aug 22, 2023 |
| Debian | — | Upgrade flac | Sep 20, 2023 | Aug 22, 2023 |
| Huawei Euleros 2_0_sp10 | — | Upgrade flac-help | Jan 10, 2024 | Aug 22, 2023 |
| Huawei Euleros 2_0_sp8 | — | Upgrade flac-libs | Mar 13, 2024 | Aug 22, 2023 |
| Huawei Euleros 2_0_sp9 | — | Upgrade flac-help | Jan 10, 2024 | Aug 22, 2023 |
| Oracle_linux | — | Upgrade flacUpgrade flac-develUpgrade flac-libs | Sep 13, 2023 | Aug 22, 2023 |
| Redhat_linux | — | Upgrade flac-develUpgrade flac-debugsourceUpgrade flac-debuginfoNo solution existsUpgrade flac-libsUpgrade flac-libs-debuginfoUpgrade flac | Sep 12, 2023 | Aug 22, 2023 |
| Rocky_linux | — | Upgrade flacUpgrade flac-develUpgrade flac-debuginfoUpgrade flac-libsUpgrade flac-debugsourceUpgrade flac-libs-debuginfo | Jun 29, 2026 | Jun 25, 2026 |
| Suse | — | Upgrade libflac8Upgrade libflac-6-32bitUpgrade flac-develUpgrade flac-docUpgrade flacUpgrade flac-devel-32bitUpgrade libflac8-32bitUpgrade libflac-6 | Aug 9, 2024 | Aug 22, 2023 |
| Ubuntu | — | Upgrade libflac8Upgrade flacUpgrade flac (Ubuntu Pro)Upgrade libflac8 (Ubuntu Pro) | Sep 18, 2023 | Aug 22, 2023 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub