Approved changes feed: RSS · Atom
cpe:2.3:a:flac:libflac:*:*:*:*:*:*:*:*
part: a version: * update: *
| Vendor | Flac (73d9ef3c-0876-5546-8da6-9d59003ef645) |
|---|---|
| Product | Libflac (b3fda907-7d10-52d7-9c2d-909fbac955f5) |
| Edition | * |
| Language | * |
| Software edition | * |
| Target software | * |
| Target hardware | * |
| Other | * |
| Notes | Imported from purl2cpe mapping |
PURL mappings
| PURL | Source | Last updated |
|---|---|---|
pkg:deb/debian/flac |
purl2cpe | 2026-06-01 10:15:26.930196 |
pkg:deb/ubuntu/flac |
purl2cpe | 2026-06-01 10:15:26.930198 |
pkg:github/xiph/flac |
purl2cpe | 2026-06-01 10:15:26.930199 |
pkg:gitlab/redhat/flac |
purl2cpe | 2026-06-01 10:15:26.930201 |
pkg:rpm/fedora/flac |
purl2cpe | 2026-06-01 10:15:26.930202 |
pkg:rpm/opensuse/flac |
purl2cpe | 2026-06-01 10:15:26.930204 |
Vulnerability references
| Identifier | cpeApplicability | Submitted | db.gcve.eu details | Rationale |
|---|---|---|---|---|
CVE:CVE-2014-9028 |
vulnerable | 2026-06-08 05:06:10.658732 |
Details available
Heap-based buffer overflow in stream_decoder.c in libFLAC before 1.3.1 allows remote attackers to execute arbitrary code via a crafted .flac file.
Published: 2014-11-26T15:00:00.000Z
Updated: 2024-08-06T13:33:13.414Z Reference links
|
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2014-8962 |
vulnerable | 2026-06-08 05:06:10.530820 |
Details available
Stack-based buffer overflow in stream_decoder.c in libFLAC before 1.3.1 allows remote attackers to execute arbitrary code via a crafted .flac file.
Published: 2014-11-26T15:00:00.000Z
Updated: 2024-08-06T13:33:12.640Z Reference links
|
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2007-6279 |
vulnerable | 2026-06-08 04:50:08.391184 |
Details available
Multiple double free vulnerabilities in Free Lossless Audio Codec (FLAC) libFLAC before 1.2.1 allow user-assisted remote attackers to execute arbitrary code via malformed (1) Seektable values or (2) Seektable Data Offsets in a .FLAC file.
Published: 2007-12-07T11:00:00.000Z
Updated: 2024-08-07T16:02:36.368Z |
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2007-6278 |
vulnerable | 2026-06-08 04:50:08.390844 |
Details available
Free Lossless Audio Codec (FLAC) libFLAC before 1.2.1 allows user-assisted remote attackers to force a client to download arbitrary files via the MIME-Type URL flag (-->) for the FLAC image file in a crafted .FLAC file.
Published: 2007-12-07T11:00:00.000Z
Updated: 2024-08-07T16:02:36.331Z |
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2007-6277 |
vulnerable | 2026-06-08 04:50:08.390442 |
Details available
Multiple buffer overflows in Free Lossless Audio Codec (FLAC) libFLAC before 1.2.1 allow user-assisted remote attackers to execute arbitrary code via large (1) Metadata Block Size, (2) VORBIS Comment String Size, (3) Picture Metadata MIME-TYPE Size, (4) Picture Description Size, (5) Picture Data Length, (6) Padding Length, and (7) PICTURE Metadata width and height values in a .FLAC file, which result in a heap-based overflow; and large (8) VORBIS Comment String Size Length, (9) Picture MIME-Type, (10) Picture MIME-Type URL, and (11) Picture Description Length values in a .FLAC file, which result in a stack-based overflow. NOTE: some of these issues may overlap CVE-2007-4619.
Published: 2007-12-07T11:00:00.000Z
Updated: 2024-08-07T16:02:35.937Z |
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2007-4619 |
vulnerable | 2026-06-08 04:49:56.849423 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
Contribute
You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.