CVE-2016-2540 — Improper Restriction of Operations within the Bounds of a Memory Buffer in Audacity

CWE-119 — Improper Restriction of Operations within the Bounds of a Memory Buffer5 documents5 sources
Severity
5.5MEDIUMNVD
EPSS
0.9%
top 24.20%
CISA KEV
Not in KEV
Exploit
No known exploits
Affected products
1
Audacityteam Audacity
Timeline
PublishedFeb 7
Latest updateMay 14

Description

Audacity before 2.1.2 allows remote attackers to cause a denial of service (memory corruption and application crash) via a crafted FORMATCHUNK structure.

CVSS vector

CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:HExploitability: 1.8 | Impact: 3.6

Affected Packages2 packages

▶Debianaudacityteam/audacity< 2.1.2-1+3

🔴Vulnerability Details

3
GHSA
GHSA-w9gj-hm7x-w4cj: Audacity before 2↗2022-05-14
▶
CVEList
CVE-2016-2540: Audacity before 2↗2018-02-07
▶
OSV
CVE-2016-2540: Audacity before 2↗2018-02-07
▶

📋Vendor Advisories

1
Debian
CVE-2016-2540: audacity - Audacity before 2.1.2 allows remote attackers to cause a denial of service (memo...↗2016
▶
CVE-2016-2540 — Audacityteam Audacity vulnerability | cvebase