Most recent entries from all

ALSA-2024:11192 — Moderate: libsndfile security update

Affected: AlmaLinux:8: libsndfile, AlmaLinux:8: libsndfile-devel, AlmaLinux:8: libsndfile-utils

libsndfile is a C library for reading and writing files containing sampled sound, such as AIFF, AU, or WAV.

Security Fix(es):

* libsndfile: Segmentation fault error in ogg_vorbis.c:417 vorbis_analysis_wrote() (CVE-2024-50612)

For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.

bdu:2025-03333

BELL-CVE-2024-50612

Affected: Alpaquita:23: libsndfile, Alpaquita:stream: libsndfile

EUVD-2026-198682

fkie_cve-2024-50612

libsndfile through 1.2.2 has an ogg_vorbis.c vorbis_analysis_wrote out-of-bounds read.

GHSA-cq86-p348-qr4p

libsndfile through 1.2.2 has an ogg_vorbis.c vorbis_analysis_wrote out-of-bounds read.

msrc_CVE-2024-50612 — libsndfile through 1.2.2 has an ogg_vorbis.c vorbis_analysis_wrote out-of-bounds read.

msrc_CVE-2024-50612

OESA-2024-2559 — libsndfile security update

Affected: openEuler:24.03-LTS: libsndfile

Libsndfile is a C library for reading and writing files containing sampled sound such as MS Windows WAV and the Apple/SGI AIFF format through one standard library interface. Security Fix(es): libsndfile through 1.2.2 has an ogg_vorbis.c vorbis_analysis_wrote out-of-bounds read.(CVE-2024-50612)

openSUSE-SU-2024:14532-1 — libsndfile-devel-1.2.2-3.1 on GA media

libsndfile-devel-1.2.2-3.1 on GA media

RHSA-2024:11172 — Red Hat Security Advisory: libsndfile security update

libsndfile: Segmentation fault error in ogg_vorbis.c:417 vorbis_analysis_wrote()

UBUNTU-CVE-2024-50612

Affected: Ubuntu:Pro:14.04:LTS: libsndfile, Ubuntu:Pro:16.04:LTS: libsndfile, Ubuntu:Pro:18.04:LTS: libsndfile, Ubuntu:20.04:LTS: libsndfile, Ubuntu:22.04:LTS: libsndfile, Ubuntu:24.04:LTS: libsndfile

libsndfile through 1.2.2 has an ogg_vorbis.c vorbis_analysis_wrote out-of-bounds read.

WID-SEC-W-2024-3282 — libsndfile: Mehrere Schwachstellen ermöglichen Denial of Service

Ein entfernter authentifizierter Angreifer kann mehrere Schwachstellen in libsndfile ausnutzen, um einen Denial-of-Service-Zustand zu erzeugen.