The flacbuffercopy function in flac.c in libsndfile 1.0.28 allows remote attackers to cause a denial of service (buffer overflow and application crash) or possibly have unspecified other impact via a crafted audio file.
{ "binaries": [ { "binary_name": "libsndfile1", "binary_version": "1.0.25-7ubuntu2.2" }, { "binary_name": "libsndfile1-dev", "binary_version": "1.0.25-7ubuntu2.2" }, { "binary_name": "sndfile-programs", "binary_version": "1.0.25-7ubuntu2.2" } ], "availability": "No subscription required" }
{ "binaries": [ { "binary_name": "libsndfile1", "binary_version": "1.0.25-10ubuntu0.16.04.1" }, { "binary_name": "libsndfile1-dev", "binary_version": "1.0.25-10ubuntu0.16.04.1" }, { "binary_name": "sndfile-programs", "binary_version": "1.0.25-10ubuntu0.16.04.1" } ], "availability": "No subscription required" }