CVE-2017-7742 PUBLISHED

In libsndfile before 1.0.28, an error in the "flac_buffer_copy()" function (flac.c) can be exploited to cause a segmentation violation (with read memory access) via a specially crafted FLAC file during a resample attempt, a similar issue to CVE-2017-7585.

EPSS 0.34% · 56.4th percentile

Risk Scores

EPSS Score
0.34%
56.4th percentile

Affected Products

VendorProductVersions
Ubuntu:16.04:LTSlibsndfile0, 1.0.25-9.1, 1.0.25-10
Ubuntu:14.04:LTSlibsndfile0, 1.0.25-7ubuntu2.1, 1.0.25-7ubuntu1

Timeline

References

Open in Interactive Console →