Vulnerabilities > Libsndfile Project > Libsndfile > High

DATE CVE VULNERABILITY TITLE RISK
2023-07-18 CVE-2022-33064 Off-by-one Error vulnerability in Libsndfile Project Libsndfile 1.1.0
An off-by-one error in function wav_read_header in src/wav.c in Libsndfile 1.1.0, results in a write out of bound, which allows an attacker to execute arbitrary code, Denial of Service or other unspecified impacts.
local
low complexity
libsndfile-project CWE-193
7.8
2023-07-18 CVE-2022-33065 Integer Overflow or Wraparound vulnerability in Libsndfile Project Libsndfile
Multiple signed integers overflow in function au_read_header in src/au.c and in functions mat4_open and mat4_read_header in src/mat4.c in Libsndfile, allows an attacker to cause Denial of Service or other unspecified impacts.
local
low complexity
libsndfile-project CWE-190
7.8
2022-03-23 CVE-2021-4156 Out-of-bounds Read vulnerability in multiple products
An out-of-bounds read flaw was found in libsndfile's FLAC codec functionality.
network
low complexity
libsndfile-project debian CWE-125
7.1
2021-07-20 CVE-2021-3246 Out-of-bounds Write vulnerability in multiple products
A heap buffer overflow vulnerability in msadpcm_decode_block of libsndfile 1.0.30 allows attackers to execute arbitrary code via a crafted WAV file.
8.8