GCVE-110-MAGEIA-2023-347

Advisory Published

Vulnetix · Advisory published December 15, 2023

2 patches are added to audiofile source to correct a vulnerability. In Audio File Library (aka audiofile) 0.3.6, there exists one NULL pointer dereference bug in ulaw2linear_buf in G711.cpp in libmodules.a that allows an attacker to cause a denial of service via a crafted file. (CVE-2019-13147)

Download JSON Open in Console

Affected Products

Vendor	Product	Versions	Platforms
Mageia	audiofile	0 (affected), 0.3.6-14.mga9 (unaffected)	—

Aliases

CVE-2019-13147

References

Updated audiofile packages fix a security vulnerability

advisory

Updated audiofile packages fix a security vulnerability

issue

Explore Further

Investigate this vulnerability in the interactive console or download the raw GCVE record.

Open in Console Download JSON