vulnerability

Rocky Linux: CVE-2021-0561: flac (RLSA-2022-8078)

Try Surface Command

Back to search

Severity

CVSS

(AV:L/AC:L/Au:N/C:P/I:N/A:N)

Published

Jun 22, 2021

Added

Mar 12, 2024

Modified

Mar 31, 2026

Description

In append_to_verify_fifo_interleaved_ of stream_encoder.c, there is a possible out of bounds write due to a missing bounds check. This could lead to local information disclosure with no additional execution privileges needed. User interaction is not needed for exploitation.Product: AndroidVersions: Android-11Android ID: A-174302683

Solutions

rocky-upgrade-flacrocky-upgrade-flac-debuginforocky-upgrade-flac-debugsourcerocky-upgrade-flac-develrocky-upgrade-flac-libsrocky-upgrade-flac-libs-debuginfo

References

CVE-2021-0561
https://attackerkb.com/topics/CVE-2021-0561
CWE-787
EUVD-EUVD-2021-3180
https://errata.rockylinux.org/RLSA-2022:8078
https://euvd.enisa.europa.eu/vulnerability/EUVD-2021-3180

Rapid7 Labs

2026 Global Threat Landscape Report

The predictive window has collapsed. Exploitation follows disclosure in days. See how attackers are accelerating and how to stay ahead.

Get report