CVE-2017-7741
MEDIUM 5.5EPSS 1.3%
In libsndfile before 1.0.28, an error in the "flac_buffer_copy()" function (flac.c) can be exploited to cause a segmentation violation (with write memory access) via a specially crafted FLAC file during a resample attempt, a similar issue to CVE-2017-7585.
- CVSS v3.0 NVD
- 5.5 MEDIUM
CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H - CVSS v2.0 NVD
- 4.3 MEDIUM
AV:N/AC:M/Au:N/C:N/I:N/A:P - EPSS
- 1.31% chance of exploitation in the next 30 days, 70th percentile
- Published
- 2017-04-12
- Updated
- 2024-08-05
Proof-of-concept exploits (1)
Security advisories
- https://blogs.gentoo.org/ago/2017/04/11/libsndfile-invalid-memory-read-and-invalid-memory…
- erikd/libsndfile/commit/60b234301adf258786d8b90be5c1d437fc8799e0