CVE-2017-6892 PUBLISHED

In libsndfile version 1.0.28, an error in the "aiff_read_chanmap()" function (aiff.c) can be exploited to cause an out-of-bounds read memory access via a specially crafted AIFF file.

EPSS 2.34% · 84.7th percentile

Risk Scores

EPSS Score
2.34%
84.7th percentile

Affected Products

VendorProductVersions
Ubuntu:16.04:LTSlibsndfile0, 1.0.25-9.1, 1.0.25-10
Ubuntu:Pro:14.04:LTSlibsndfile0, 1.0.25-7ubuntu2.2, 1.0.25-7ubuntu1

Timeline

References

Open in Interactive Console →