Heap Buffer Overflow in libsndfile Affects Multiple Linux Distributions
CVE-2021-3246

8.8HIGH

Key Information:

Vendor: Libsndfile Project
Status: Libsndfile
Vendor: CVE Published:; 20 July 2021

🔔 Create Libsndfile Project Vulnerability Alert

What is CVE-2021-3246?

A heap buffer overflow vulnerability exists in the msadpcm_decode_block function of libsndfile version 1.0.30. This flaw can be exploited by attackers using specially crafted WAV files, potentially allowing the execution of arbitrary code on the affected systems. The vulnerability poses a risk to various Linux distributions utilizing libsndfile, highlighting the need for prompt updates and security patches to mitigate such threats.