CVE-2017-7586 PUBLISHED

In libsndfile before 1.0.28, an error in the "header_read()" function (common.c) when handling ID3 tags can be exploited to cause a stack-based buffer overflow via a specially crafted FLAC file.

EPSS 0.32% · 54.6th percentile

Risk Scores

EPSS Score
0.32%
54.6th percentile

Affected Products

VendorProductVersions
Ubuntu:14.04:LTSlibsndfile0, 1.0.25-7ubuntu1, 1.0.25-7ubuntu2
Ubuntu:16.04:LTSlibsndfile0, 1.0.25-9.1, 1.0.25-10

Timeline

References

Open in Interactive Console →