CVE-2017-1000010

HIGH

Audacity <2.3.2 - RCE

Title source: llm

Description

Audacity 2.1.2 through 2.3.2 is vulnerable to Dll HIjacking in the avformat-55.dll resulting arbitrary code execution.

Scores

CVSS v3 7.8
EPSS 0.0137
EPSS Percentile 80.0%
Attack Vector LOCAL
CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H

Classification

CWE
CWE-427
Status draft

Affected Products (1)

audacityteam/audacity < 2.3.2

Timeline

Published Jul 17, 2017
Tracked Since Feb 18, 2026