Memory Leak in libsndfile Affects Audio File Conversion
CVE-2018-13419

6.5MEDIUM

Key Information:

Vendor

Libsndfile Project

Status
Libsndfile
Vendor
CVE Published:
7 July 2018

What is CVE-2018-13419?

A memory leak has been identified in the libsndfile library, specifically in the psf_allocate function located in common.c. This vulnerability was demonstrated through its effect on the sndfile-convert tool. Although efforts were made to replicate the issue, the maintainer and third parties reported difficulties in reproducing the problem, leading to the closure of the reported issue. Users of libsndfile should be aware of this potential memory management flaw when utilizing audio file conversion processes.

References

https://github.com/erikd/libsndfile/issues/398
x_refsource_MISC

CVSS V3.1

Score:
6.5
Severity:
MEDIUM
Confidentiality:
None
Integrity:
None
Availability:
None
Attack Vector:
Network
Attack Complexity:
Low
Privileges Required:
None
User Interaction:
Required
Scope:
Unchanged

Timeline

  • Vulnerability published

  • Vulnerability Reserved

.