Out of Bounds Read in libsndfile Affects Multiple Vendors

CVE-2017-14246

What is CVE-2017-14246?

An out of bounds read vulnerability exists in the function d2ulaw_array() within ulaw.c of libsndfile version 1.0.28. This flaw can be triggered by mishandling NAN and INFINITY floating-point values, potentially allowing remote attackers to exploit the vulnerability. Successful exploitation may lead to denial of service (DoS) attacks or reveal sensitive information, highlighting the need for increased vigilance in managing software dependencies and applying timely security updates.

References