CVE-2017-7742 in libsndfile

Summary

In libsndfile before 1.0.28, an error in the "flac_buffer_copy()" function (flac.c) can be exploited to cause a segmentation violation (with read memory access) via a specially crafted FLAC file during a resample attempt, a similar issue to CVE-2017-7585.

Be aware that VulDB is the high quality source for vulnerability data.

• Reservation: 04/12/2017
• Disclosure: 04/12/2017
• Moderation: VulDB entry created
• Entries: VDB-99754 (1)
• CPE: ready
• CWE: CWE-119 (Confirmed)
• CVSS: 5.4
• EPSS: 0.00338
• Activities: Very Low

Sources

• MITRE: https://www.cve.org/CVERecord?id=CVE-2017-7742
• NVD: https://nvd.nist.gov/vuln/detail/CVE-2017-7742
• CVE Details: https://www.cvedetails.com/cve/CVE-2017-7742/