audiofile (Audio File Library) 0.3.6

In autofile Audio File Library 0.3.6, there exists one memory leak vulnerability in printfileinfo, in printinfo.c, which allows an attacker to leak sensitive information via a crafted file. The printfileinfo function calls the copyrightstring function to get data, however, it dosn't use zero bytes to truncate the data.

Published: 2022-02-22T00:00:00.000Z
Updated: 2025-11-03T19:26:53.732Z

Heap buffer overflow vulnerability in FilePOSIX::read in File.cpp in audiofile 0.3.6 may cause denial-of-service via a crafted wav file, this bug can be triggered by the executable sfconvert.

Published: 2023-08-22T00:00:00.000Z
Updated: 2024-10-04T16:35:09.812Z

In Audio File Library (aka audiofile) 0.3.6, there exists one NULL pointer dereference bug in ulaw2linear_buf in G711.cpp in libmodules.a that allows an attacker to cause a denial of service via a crafted file.

Published: 2019-07-01T00:00:00.000Z
Updated: 2025-11-03T19:25:23.948Z

An issue has been discovered in mpruett Audio File Library (aka audiofile) 0.3.6, 0.3.5, 0.3.4, 0.3.3, 0.3.2, 0.3.1, 0.3.0. A heap-based buffer overflow in Expand3To4Module::run has occurred when running sfconvert.

Published: 2018-09-16T21:00:00.000Z
Updated: 2024-08-05T10:39:59.553Z

The audiofile Audio File Library 0.3.6 has a NULL pointer dereference bug in ModuleState::setup in modules/ModuleState.cpp, which allows an attacker to cause a denial of service via a crafted caf file, as demonstrated by sfconvert.

Published: 2018-07-08T16:00:00.000Z
Updated: 2024-08-05T09:00:35.391Z