| शीर्षक | libsndfile b9103bd48b6c8fb517ae737fe3baee0c718b804c Use of Uninitialized Resource |
|---|
| विवरण | libsndfile 1.2.2 and git master (tested at b9103bd), and possibly earlier versions, contain an information disclosure vulnerability in src/wavlike.c: when parsing a WAV LIST/adtl labl subchunk, wavlike_subchunk_parse() reads only chunk_size bytes into a 2048-byte stack buffer but then always memcpy()s 256 bytes (sizeof(SF_CUE_POINT.name)) into the cue-point name, so a short labl subchunk causes up to roughly 253 bytes of uninitialized stack memory to be copied into the cue name and exposed through the public sf_command(SFC_GET_CUE) API; this is CWE-457 leading to CWE-200, with all relevant fields attacker-controlled, and in long-lived processes the leaked bytes may contain residual stack data such as return addresses, saved registers, or stdio internals. |
|---|
| स्रोत | ⚠️ https://github.com/libsndfile/libsndfile/issues/1169 |
|---|
| उपयोगकर्ता | suyuanwang (UID 101634) |
|---|
| सबमिशन | 26/09/2026 10:46 AM (19 दिन पहले) |
|---|
| संयम | 13/10/2026 06:58 AM (17 days later) |
|---|
| स्थिति | स्वीकृत |
|---|
| VulDB प्रविष्टि | 417466 [libsndfile तक 1.2.2 WAV Parsing src/wavlike.c wavlike_subchunk_parse सूचना का प्रकटीकरण] |
|---|
| अंक | 20 |
|---|