Description
It was discovered the fix for CVE-2018-19758 (libsndfile) was not complete and still allows a read beyond the limits of a buffer in wav_write_header() function in wav.c. A local attacker may use this flaw to make the application crash.
References (6)
Core 6
Core References
Issue Tracking, Patch, Third Party Advisory x_refsource_confirm
https://bugzilla.redhat.com/show_bug.cgi?id=CVE-2019-3832
Exploit, Third Party Advisory x_refsource_confirm
https://github.com/erikd/libsndfile/issues/456
Patch, Third Party Advisory x_refsource_confirm
https://github.com/erikd/libsndfile/pull/460
Third Party Advisory vendor-advisory
x_refsource_ubuntu
https://usn.ubuntu.com/4013-1/
Third Party Advisory vendor-advisory
x_refsource_gentoo
https://security.gentoo.org/glsa/202007-65
Mailing List, Third Party Advisory mailing-list
x_refsource_mlist
https://lists.debian.org/debian-lts-announce/2020/10/msg00030.html
Scores
CVSS v3
5.5
EPSS
0.0010
EPSS Percentile
28.0%
Attack Vector
LOCAL
CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H
Details
CWE
CWE-125
Status
published
Products (5)
canonical/ubuntu_linux
16.04
canonical/ubuntu_linux
18.04
canonical/ubuntu_linux
18.10
debian/debian_linux
9.0
libsndfile_project/libsndfile
1.0.28
Published
Mar 21, 2019
Tracked Since
Feb 18, 2026