Out-of-bounds Read Vulnerability in FLAC Codec of libsndfile

CVE-2021-4156

What is CVE-2021-4156?

A vulnerability has been identified in the FLAC codec functionality of libsndfile, characterized by an out-of-bounds read flaw. This could potentially be exploited by an attacker who manages to convince a user to open a maliciously crafted file. When the affected application processes such a file, it risks encountering an out-of-bounds read. Such an event could lead to application crashes and may also expose sensitive memory information, further enabling an attacker to exploit additional vulnerabilities.

References