CVE-2017-7586

In libsndfile before 1.0.28, an error in the "header_read()" function (common.c) when handling ID3 tags can be exploited to cause a stack-based buffer overflow…

published April 7, 2017

CVSS
—
EPSS
1%
Percentile
68.8
In the wild
Unconfirmed
What it is

In libsndfile before 1.0.28, an error in the "header_read()" function (common.c) when handling ID3 tags can be exploited to cause a stack-based buffer overflow via a specially crafted FLAC file.

The record
Technical detail
CVSS
Not scored
CVSS v4.0
Not supplied
EPSS
0.01243 · 68.8th percentile
Published
2017-04-07T20:00Z
EPSS history
Timeline
  • 07 APR 20:00Z
    In libsndfile before 1.0.28, an error in the "header_read()" function (common.c) when handling ID3 tags can be exploited to cause a stack-based buffer overflow…
    cvelistv5