Vulnerabilities > Audio File Library Project

DATE CVE VULNERABILITY TITLE RISK
2022-02-24 CVE-2022-24599 Memory Leak vulnerability in multiple products
In autofile Audio File Library 0.3.6, there exists one memory leak vulnerability in printfileinfo, in printinfo.c, which allows an attacker to leak sensitive information via a crafted file.
6.5
2020-02-19 CVE-2015-7747 Classic Buffer Overflow vulnerability in multiple products
Buffer overflow in the afReadFrames function in audiofile (aka libaudiofile and Audio File Library) allows user-assisted remote attackers to cause a denial of service (program crash) or possibly execute arbitrary code via a crafted audio file, as demonstrated by sixteen-stereo-to-eight-mono.c.
8.8
2019-07-02 CVE-2019-13147 NULL Pointer Dereference vulnerability in multiple products
In Audio File Library (aka audiofile) 0.3.6, there exists one NULL pointer dereference bug in ulaw2linear_buf in G711.cpp in libmodules.a that allows an attacker to cause a denial of service via a crafted file.
network
low complexity
audio-file-library-project debian CWE-476
6.5
2018-09-16 CVE-2018-17095 Out-of-bounds Write vulnerability in multiple products
An issue has been discovered in mpruett Audio File Library (aka audiofile) 0.3.6, 0.3.5, 0.3.4, 0.3.3, 0.3.2, 0.3.1, 0.3.0.
8.8
2018-07-08 CVE-2018-13440 NULL Pointer Dereference vulnerability in multiple products
The audiofile Audio File Library 0.3.6 has a NULL pointer dereference bug in ModuleState::setup in modules/ModuleState.cpp, which allows an attacker to cause a denial of service via a crafted caf file, as demonstrated by sfconvert.
6.5