An out-of-bounds read flaw was found in libsndfile's FLAC codec functionality. An attacker who is able to submit a specially crafted file (via tricking a user to open or otherwise) to an application linked with libsndfile and using the FLAC codec, could trigger an out-of-bounds read that would most likely cause a crash but could potentially leak memory information that could be used in further exploitation of other flaws.
References
Link | Resource |
---|---|
https://bugzilla.redhat.com/show_bug.cgi?id=2027690 | Exploit Issue Tracking Third Party Advisory |
https://github.com/libsndfile/libsndfile/issues/731 | Exploit Issue Tracking Third Party Advisory |
https://github.com/libsndfile/libsndfile/pull/732/commits/4c30646abf7834e406f7e2429c70bc254e18beab | Patch Third Party Advisory |
https://lists.debian.org/debian-lts-announce/2022/06/msg00020.html | Mailing List Third Party Advisory |
https://lists.debian.org/debian-lts-announce/2022/09/msg00036.html | Mailing List Third Party Advisory |
https://security.gentoo.org/glsa/202309-11 |
History
No history.
MITRE Information
Status: PUBLISHED
Assigner: redhat
Published: 2022-03-23T00:00:00
Updated: 2023-09-29T12:06:18.959269
Reserved: 2021-12-22T00:00:00
Link: CVE-2021-4156
JSON object: View
NVD Information
Status : Modified
Published: 2022-03-23T20:15:10.097
Modified: 2023-09-29T13:15:09.833
Link: CVE-2021-4156
JSON object: View
Redhat Information
No data.
CWE