CVE-2017-7585 PUBLISHED

In libsndfile before 1.0.28, an error in the "flac_buffer_copy()" function (flac.c) can be exploited to cause a stack-based buffer overflow via a specially crafted FLAC file.

EPSS 0.30% · 53.2th percentile

Risk Scores

EPSS Score
0.30%
53.2th percentile

Affected Products

VendorProductVersions
Ubuntu:16.04:LTSlibsndfile0, 1.0.25-9.1, 1.0.25-10
Ubuntu:14.04:LTSlibsndfile0, 1.0.25-7ubuntu2.1, 1.0.25-7ubuntu1

Timeline

References

Open in Interactive Console →