An issue has been discovered in mpruett Audio File Library (aka audiofile) 0.3.6, 0.3.5, 0.3.4, 0.3.3, 0.3.2, 0.3.1, 0.3.0.

Affected versions

NVD version ranges (for catalog products). Add the product to your stack with a version and matching uses these.

• audiofile audiofile0.3.0
• audiofile audiofile0.3.1
• audiofile audiofile0.3.2
• audiofile audiofile0.3.3
• audiofile audiofile0.3.4
• audiofile audiofile0.3.5
• audiofile audiofile0.3.6
• canonical ubuntu linux14.04

Package-level exposure

OSV and GitHub Advisory data: ecosystem, package and range. SBOM matching uses this table.

Other highest-scoring records for the same primary product.

• CVE-2015-7747Buffer overflow in the afReadFrames function in audiofile (aka libaudiofile and Audio File Library) allows user-assisted remote attackers to
  38Monitor
• CVE-2017-6828Heap-based buffer overflow in the readValue function in FileHandle.cpp in audiofile (aka libaudiofile and Audio File Library) 0.3.6 allows r
  32Monitor
• CVE-2017-6827Heap-based buffer overflow in the MSADPCM::initializeCoefficients function in MSADPCM.cpp in audiofile (aka libaudiofile and Audio File Libr
  32Monitor
• CVE-2025-50950Audiofile v0.3.7 was discovered to contain a NULL pointer dereference via the ModuleState::setup function.
  30Monitor
• CVE-2022-24599In autofile Audio File Library 0.3.6, there exists one memory leak vulnerability in printfileinfo, in printinfo.c, which allows an attacker
  27Monitor
• CVE-2019-13147In Audio File Library (aka audiofile) 0.3.6, there exists one NULL pointer dereference bug in ulaw2linear_buf in G711.cpp in libmodules.a th
  27Monitor

FIRST EPSS daily score; only changes of 0.01 or more are recorded (step chart).

Attack context

MITRE CAPEC attack patterns and ATT&CK techniques for this weakness class (CWE). A starting point for detection rules and threat hunting.

MITRE has no CAPEC/ATT&CK mapping for this CWE.