CVE-2019-13147 PUBLISHED

In Audio File Library (aka audiofile) 0.3.6, there exists one NULL pointer dereference bug in ulaw2linear_buf in G711.cpp in libmodules.a that allows an attacker to cause a denial of service via a crafted file.

EPSS 0.14% · 33.9th percentile

Risk Scores

EPSS Score
0.14%
33.9th percentile

Affected Products

VendorProductVersions
Ubuntu:Pro:16.04:LTSaudiofile0, 0.3.6-2, 0.3.6-2ubuntu0.15.10.1
Ubuntu:24.04:LTSaudiofile0.3.6-5build2, 0, 0.3.6-6build2
Ubuntu:22.04:LTSaudiofile0, 0.3.6-5build1
Ubuntu:20.04:LTSaudiofile0.3.6-5build1, 0.3.6-5, 0
Ubuntu:Pro:18.04:LTSaudiofile0, 0.3.6-4
Ubuntu:25.10audiofile0.3.6-7build1, 0
Ubuntu:Pro:14.04:LTSaudiofile0.3.6-2ubuntu0.14.04.2, 0.3.6-2ubuntu0.14.04.1, 0.3.6-2

Timeline

References

Open in Interactive Console →