Most recent entries from all

ALSA-2022:1968 — Moderate: libsndfile security update

Affected: AlmaLinux:8: libsndfile, AlmaLinux:8: libsndfile-devel

libsndfile is a C library for reading and writing files containing sampled sound, such as AIFF, AU, or WAV.

Security Fix(es):

* libsndfile: heap out-of-bounds read in src/flac.c in flac_buffer_copy (CVE-2021-4156)

For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.

Additional Changes:

For detailed information on changes in this release, see the AlmaLinux Release Notes linked from the References section.

bdu:2022-05796

Withdrawn: BELL-CVE-2021-4156 — CVE-2021-4156 does not affect BellSoft software

Withdrawn by the publisher.

EUVD-2026-263178

fkie_cve-2021-4156

An out-of-bounds read flaw was found in libsndfile's FLAC codec functionality. An attacker who is able to submit a specially crafted file (via tricking a user to open or otherwise) to an application linked with libsndfile and using the FLAC codec, could trigger an out-of-bounds read that would most likely cause a crash but could potentially leak memory information that could be used in further exploitation of other flaws.

GHSA-vvgm-gfhp-rj9x

gsd-2021-4156

OESA-2022-1680 — libsndfile security update

Affected: openEuler:20.03-LTS-SP1: libsndfile, openEuler:20.03-LTS-SP3: libsndfile, openEuler:22.03-LTS: libsndfile

Libsndfile is a C library for reading and writing files containing sampled sound such as MS Windows WAV and the Apple/SGI AIFF format through one standard library interface. Security Fix(es): An out-of-bounds read flaw was found in libsndfile's FLAC codec functionality. An attacker who is able to submit a specially crafted file (via tricking a user to open or otherwise) to an application linked with libsndfile and using the FLAC codec, could trigger an out-of-bounds read that would most likely cause a crash but could potentially leak memory information that could be used in further exploitation of other flaws.(CVE-2021-4156)

openSUSE-SU-2022:0052-1 — Security update for libsndfile

Security update for libsndfile

SUSE-SU-2022:0034-1 — Security update for libsndfile

Security update for libsndfile

UBUNTU-CVE-2021-4156

Affected: Ubuntu:Pro:14.04:LTS: libsndfile, Ubuntu:Pro:16.04:LTS: libsndfile, Ubuntu:Pro:18.04:LTS: libsndfile, Ubuntu:20.04:LTS: libsndfile, Ubuntu:22.04:LTS: libsndfile

WID-SEC-W-2022-0497 — libsndfile: Schwachstelle ermöglicht Denial of Service

Ein entfernter, anonymer Angreifer kann eine Schwachstelle in libsndfile ausnutzen, um einen Denial of Service Angriff durchzuführen und um Informationen offenzulegen.