It was discovered that libsndfile incorrectly handled certain malformed files. A remote attacker could use this issue to cause libsndfile to crash, resulting in a denial of service, or possibly execute arbitrary code.
{ "binaries": [ { "binary_name": "libsndfile1", "binary_version": "1.0.28-4ubuntu0.18.04.2" }, { "binary_name": "libsndfile1-dev", "binary_version": "1.0.28-4ubuntu0.18.04.2" }, { "binary_name": "sndfile-programs", "binary_version": "1.0.28-4ubuntu0.18.04.2" } ], "availability": "No subscription required" }
{ "binaries": [ { "binary_name": "libsndfile1", "binary_version": "1.0.28-7ubuntu0.1" }, { "binary_name": "libsndfile1-dev", "binary_version": "1.0.28-7ubuntu0.1" }, { "binary_name": "sndfile-programs", "binary_version": "1.0.28-7ubuntu0.1" } ], "availability": "No subscription required" }