CVE-2021-4156 — Out-of-bounds Read in Libsndfile
Severity
7.1HIGHNVD
EPSS
0.2%
top 59.95%
CISA KEV
Not in KEV
Exploit
No known exploits
Affected products
Timeline
PublishedMar 23
Latest updateFeb 18
Description
An out-of-bounds read flaw was found in libsndfile's FLAC codec functionality. An attacker who is able to submit a specially crafted file (via tricking a user to open or otherwise) to an application linked with libsndfile and using the FLAC codec, could trigger an out-of-bounds read that would most likely cause a crash but could potentially leak memory information that could be used in further exploitation of other flaws.
CVSS vector
CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:L/I:N/A:HExploitability: 2.8 | Impact: 4.2
Affected Packages5 packages
Also affects: Debian Linux 10.0, 9.0
Patches
🔴Vulnerability Details
4GHSA▶
GHSA-vvgm-gfhp-rj9x: An out-of-bounds read flaw was found in libsndfile's FLAC codec functionality↗2022-03-24
CVEList▶
CVE-2021-4156: An out-of-bounds read flaw was found in libsndfile's FLAC codec functionality↗2022-03-23
OSV▶
CVE-2021-4156: An out-of-bounds read flaw was found in libsndfile's FLAC codec functionality↗2022-03-23