Most recent entries from all

ALSA-2021:3253 — Important: libsndfile security update

Affected: AlmaLinux:8: libsndfile, AlmaLinux:8: libsndfile-devel

libsndfile is a C library for reading and writing files containing sampled sound, such as AIFF, AU, or WAV.

Security Fix(es):

* libsndfile: Heap buffer overflow via crafted WAV file allows arbitrary code execution (CVE-2021-3246)

For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.

bdu:2021-03899

Withdrawn: BELL-CVE-2021-3246 — CVE-2021-3246 does not affect BellSoft software

Withdrawn by the publisher.

EUVD-2026-20759

fkie_cve-2021-3246

A heap buffer overflow vulnerability in msadpcm_decode_block of libsndfile 1.0.30 allows attackers to execute arbitrary code via a crafted WAV file.

GHSA-p3g4-4phf-g392

A heap buffer overflow vulnerability in msadpcm_decode_block of libsndfile 1.0.30 allows attackers to execute arbitrary code via a crafted WAV file.

gsd-2021-3246

OESA-2021-1354 — libsndfile security update

Affected: openEuler:20.03-LTS-SP1: libsndfile, openEuler:20.03-LTS-SP2: libsndfile

Libsndfile is a C library for reading and writing files containing sampled sound such as MS Windows WAV and the Apple/SGI AIFF format through one standard library interface. Security Fix(es): A heap buffer overflow flaw was found in libsndfile. This flaw allows an attacker to execute arbitrary code via a crafted WAV file. The highest threat from this vulnerability is to confidentiality, integrity, as well as system availability.(CVE-2021-3246)

openSUSE-SU-2021:1166-1 — Security update for libsndfile

Security update for libsndfile

RHSA-2021:3297 — Red Hat Security Advisory: libsndfile security update

libsndfile: Heap buffer overflow via crafted WAV file allows arbitrary code execution

SUSE-SU-2021:14769-1 — Security update for libsndfile

Security update for libsndfile

UBUNTU-CVE-2021-3246

Affected: Ubuntu:Pro:14.04:LTS: libsndfile, Ubuntu:Pro:16.04:LTS: libsndfile, Ubuntu:18.04:LTS: libsndfile, Ubuntu:20.04:LTS: libsndfile

A heap buffer overflow vulnerability in msadpcm_decode_block of libsndfile 1.0.30 allows attackers to execute arbitrary code via a crafted WAV file.

WID-SEC-W-2023-2522 — libsndfile: Schwachstelle ermöglicht Codeausführung

Ein entfernter, anonymer Angreifer kann eine Schwachstelle in libsndfile ausnutzen, um beliebigen Programmcode auszuführen.