Divide-By-Zero Vulnerability in libsndfile Affects Audio Playback Functionality
CVE-2017-16942

6.5MEDIUM

Key Information:

Vendor

Libsndfile Project

Status
Libsndfile
Vendor
CVE Published:
25 November 2017

What is CVE-2017-16942?

A divide-by-zero error in the library libsndfile version 1.0.25 exists in the function wav_w64_read_fmt_chunk(). This vulnerability can be exploited by specially crafted audio files, potentially leading to a denial-of-service condition during playback. The issue was addressed in version 1.0.26 of libsndfile, making it critical for users to upgrade to the latest version to mitigate the risk.

References

https://github.com/erikd/libsndfile/issues/341
x_refsource_MISC
https://usn.ubuntu.com/4013-1/
vendor-advisoryx_refsource_UBUNTU

CVSS V3.1

Score:
6.5
Severity:
MEDIUM
Confidentiality:
None
Integrity:
None
Availability:
None
Attack Vector:
Network
Attack Complexity:
Low
Privileges Required:
None
User Interaction:
Required
Scope:
Unchanged

Timeline

  • Vulnerability published

  • Vulnerability Reserved

.