AVG-2185 log
Package | libsndfile |
Status | Fixed |
Severity | Medium |
Type | arbitrary code execution |
Affected | 1.0.31-1 |
Fixed | 1.1.0-1 |
Current | 1.2.2-2 [extra] |
Ticket | None |
Created | Tue Jul 20 15:55:36 2021 |
Issue | Severity | Remote | Type | Description |
---|---|---|---|---|
CVE-2021-3246 | Medium | Yes | Arbitrary code execution | A heap buffer overflow vulnerability in msadpcm_decode_block of libsndfile before version 1.1.0 allows attackers to execute arbitrary code via a crafted WAV file. |