Out of Bounds Read Vulnerability in libsndfile Affects Multiple Platforms

CVE-2017-14245

What is CVE-2017-14245?

An out of bounds read vulnerability has been identified in the libsndfile library, specifically in the d2alaw_array() function within the alaw.c file. This flaw can occur when the library improperly handles NAN and INFINITY floating-point values, potentially leading to scenarios where remote attackers could exploit the situation. Such exploitation may result in denial of service (DoS) conditions or could facilitate the disclosure of sensitive information.

References