Out-of-Bounds Read Vulnerability in libsndfile Affects Multiple Platforms
CVE-2014-9496

Currently unrated

Key Information:

Vendor: Libsndfile Project
Status: Libsndfile
Vendor: CVE Published:; 16 January 2015

🔔 Create Libsndfile Project Vulnerability Alert

What is CVE-2014-9496?

The sd2_parse_rsrc_fork function in libsndfile's source code can lead to an out-of-bounds read triggered by improper processing of map offsets or rsrc markers. This vulnerability can potentially allow attackers to exploit affected systems through specially crafted input files, posing a risk of memory disclosure and further impacts on applications using this library.

References

http://www.securityfocus.com/bid/71796

vdb-entryx_refsource_BID

https://github.com/erikd/libsndfile/issues/93

x_refsource_CONFIRM

http://lists.opensuse.org/opensuse-updates/2015-01/msg000...

vendor-advisoryx_refsource_SUSE

Download the Critical Vulnerability Management Cheat Sheet

Timeline

Vulnerability published
Jan 16, 2015
Vulnerability Reserved
Jan 3, 2015

CVE-2014-9496 Data

JSON