Out-of-Bounds Read Vulnerability in libsndfile from Eric Duminil

CVE-2017-6892

What is CVE-2017-6892?

In libsndfile version 1.0.28, a flaw exists in the 'aiff_read_chanmap()' function within the aiff.c module. This vulnerability can be exploited by crafting a malicious AIFF file, leading to an out-of-bounds read memory access. The exploitation may allow an attacker to read memory locations that are outside the intended data bounds, potentially leading to information leakage or further exploits in the system. It is crucial for users of this library to review their current versions and apply any security updates to mitigate risks.

References