CVE-2014-9496 — Improper Restriction of Operations within the Bounds of a Memory Buffer in Project Libsndfile
Severity
2.1LOWNVD
EPSS
0.1%
top 71.81%
CISA KEV
Not in KEV
Exploit
No known exploits
Affected products
Timeline
PublishedJan 16
Latest updateMay 13
Description
The sd2_parse_rsrc_fork function in sd2.c in libsndfile allows attackers to have unspecified impact via vectors related to a (1) map offset or (2) rsrc marker, which triggers an out-of-bounds read.
CVSS vector
AV:L/AC:L/C:N/I:N/A:PExploitability: 3.9 | Impact: 2.9
Affected Packages5 packages
Also affects: Debian Linux 9.0, Ubuntu Linux 12.04, 14.04, 15.04, 15.10