Skip to content
Noroxi

libsndfile project records

32 published records for vendor libsndfile project.

Researcher profile

Entered KEV
0 · 0%
Weaponized
0 · 0%
Pre-auth RCE
1
With a fix record
96.9%
Median publish → KEV
No record has entered KEV

Records by year

  1. 17
  2. 18
  3. 19
  4. 21
  5. 22
  6. 23
  7. 24
  8. 25
  9. 26

Bar: total · dark part: CISA KEV.

Recurring classes

The weakness classes this vendor ships most often: where to look.

CWE

Attack profile

All records

32 records
  • CVE-2017-12562
    40Plan

    Heap-based Buffer Overflow in the psf_binheader_writef function in common.c in libsndfile through 1.0.28 allows remote attackers to cause a

    CriticalCVSS 9.8No exploitEPSS 3%

    libsndfile project · libsndfileAug 5, 2017

  • CVE-2017-8361
    36Monitor

    The flac_buffer_copy function in flac.c in libsndfile 1.0.28 allows remote attackers to cause a denial of service (buffer overflow and appli

    HighCVSS 8.8No exploitEPSS 3%

    libsndfile project · libsndfileApr 30, 2017

  • CVE-2018-13139
    36Monitor

    A stack-based buffer overflow in psf_memset in common.c in libsndfile 1.0.28 allows remote attackers to cause a denial of service (applicati

    HighCVSS 8.8No exploitEPSS 3%

    libsndfile project · libsndfileJul 4, 2018

  • CVE-2021-3246
    36Monitor

    A heap buffer overflow vulnerability in msadpcm_decode_block of libsndfile 1.0.30 allows attackers to execute arbitrary code via a crafted W

    HighCVSS 8.8No exploitEPSS 3%

    libsndfile project · libsndfileJul 20, 2021

  • CVE-2017-6892
    36Monitor

    In libsndfile version 1.0.28, an error in the "aiff_read_chanmap()" function (aiff.c) can be exploited to cause an out-of-bounds read memory

    HighCVSS 8.8No exploitEPSS 2%

    libsndfile project · libsndfileJun 12, 2017

  • CVE-2018-19662
    33Monitor

    An issue was discovered in libsndfile 1.0.28.

    HighCVSS 8.1No exploitEPSS 2%

    libsndfile project · libsndfileNov 29, 2018

  • CVE-2017-14246
    33Monitor

    An out of bounds read in the function d2ulaw_array() in ulaw.c of libsndfile 1.0.28 may lead to a remote DoS attack or information disclosur

    HighCVSS 8.1No exploitEPSS 2%

    libsndfile project · libsndfileSep 21, 2017

  • CVE-2017-14245
    33Monitor

    An out of bounds read in the function d2alaw_array() in alaw.c of libsndfile 1.0.28 may lead to a remote DoS attack or information disclosur

    HighCVSS 8.1No exploitEPSS 2%

    libsndfile project · libsndfileSep 21, 2017

  • CVE-2022-33065
    31Monitor

    Multiple signed integers overflow in function au_read_header in src/au.c and in functions mat4_open and mat4_read_header in src/mat4.c in Li

    HighCVSS 7.8No exploitEPSS 0%

    libsndfile project · libsndfileJul 18, 2023

  • CVE-2022-33064
    31Monitor

    An off-by-one error in function wav_read_header in src/wav.c in Libsndfile 1.1.0, results in a write out of bound, which allows an attacker

    HighCVSS 7.8No exploitEPSS 0%

    libsndfile project · libsndfileJul 18, 2023

  • CVE-2025-52194
    30Monitor

    A buffer overflow vulnerability exists in libsndfile version 1.2.2 and potentially earlier versions when processing malformed IRCAM audio fi

    HighCVSS 7.5No exploitEPSS 0%

    libsndfile project · libsndfileAug 21, 2025

  • CVE-2026-37555
    30Monitor

    An issue was discovered in libsndfile 1.2.2 IMA ADPCM codec.

    HighCVSS 7.5No exploitEPSS 0%

    libsndfile project · libsndfileApr 29, 2026

  • CVE-2021-4156
    29Monitor

    An out-of-bounds read flaw was found in libsndfile's FLAC codec functionality.

    HighCVSS 7.1No exploitEPSS 1%

    libsndfile project · libsndfileMar 23, 2022

  • CVE-2017-8362
    27Monitor

    The flac_buffer_copy function in flac.c in libsndfile 1.0.28 allows remote attackers to cause a denial of service (invalid read and applicat

    MediumCVSS 6.5No exploitEPSS 3%

    libsndfile project · libsndfileApr 30, 2017

  • CVE-2017-8365
    27Monitor

    The i2les_array function in pcm.c in libsndfile 1.0.28 allows remote attackers to cause a denial of service (buffer over-read and applicatio

    MediumCVSS 6.5No exploitEPSS 3%

    libsndfile project · libsndfileApr 30, 2017

  • CVE-2017-8363
    27Monitor

    The flac_buffer_copy function in flac.c in libsndfile 1.0.28 allows remote attackers to cause a denial of service (heap-based buffer over-re

    MediumCVSS 6.5No exploitEPSS 3%

    libsndfile project · libsndfileApr 30, 2017

  • CVE-2018-19432
    27Monitor

    An issue was discovered in libsndfile 1.0.28.

    MediumCVSS 6.5No exploitEPSS 2%

    libsndfile project · libsndfileNov 22, 2018

  • CVE-2017-14634
    27Monitor

    In libsndfile 1.0.28, a divide-by-zero error exists in the function double64_init() in double64.c, which may lead to DoS when playing a craf

    MediumCVSS 6.5No exploitEPSS 2%

    libsndfile project · libsndfileSep 21, 2017

  • CVE-2018-19661
    27Monitor

    An issue was discovered in libsndfile 1.0.28.

    MediumCVSS 6.5No exploitEPSS 2%

    libsndfile project · libsndfileNov 29, 2018

  • CVE-2018-19758
    27Monitor

    There is a heap-based buffer over-read at wav.c in wav_write_header in libsndfile 1.0.28 that will cause a denial of service.

    MediumCVSS 6.5No exploitEPSS 1%

    libsndfile project · libsndfileNov 29, 2018

  • CVE-2018-13419
    26Monitor

    An issue has been found in libsndfile 1.0.28.

    MediumCVSS 6.5No exploitEPSS 1%

    libsndfile project · libsndfileJul 7, 2018

  • CVE-2017-16942
    26Monitor

    In libsndfile 1.0.25 (fixed in 1.0.26), a divide-by-zero error exists in the function wav_w64_read_fmt_chunk() in wav_w64.c, which may lead

    MediumCVSS 6.5No exploitEPSS 1%

    libsndfile project · libsndfileNov 25, 2017

  • CVE-2024-50613
    26Monitor

    libsndfile through 1.2.2 has a reachable assertion, that may lead to application exit, in mpeg_l3_encode.c mpeg_l3_encoder_close.

    MediumCVSS 6.5No exploitEPSS 0%

    libsndfile project · libsndfileOct 27, 2024

  • CVE-2017-7585
    22Monitor

    In libsndfile before 1.0.28, an error in the "flac_buffer_copy()" function (flac.c) can be exploited to cause a stack-based buffer overflow

    MediumCVSS 5.5No exploitEPSS 1%

    libsndfile project · libsndfileApr 7, 2017

  • CVE-2017-7742
    22Monitor

    In libsndfile before 1.0.28, an error in the "flac_buffer_copy()" function (flac.c) can be exploited to cause a segmentation violation (with

    MediumCVSS 5.5No exploitEPSS 1%

    libsndfile project · libsndfileApr 12, 2017