high8.8
CVE-2018-17095
An issue has been discovered in mpruett Audio File Library (aka audiofile) 0.3.6, 0.3.5, 0.3.4, 0.3.3, 0.3.2, 0.3.1, 0.3.0.
Impact
An issue has been discovered in mpruett Audio File Library (aka audiofile) 0.3.6, 0.3.5, 0.3.4, 0.3.3, 0.3.2, 0.3.1, 0.3.0. A heap-based buffer overflow in Expand3To4Module::run has occurred when running sfconvert.
Affected products
| Vendor | Product | Affected versions |
|---|---|---|
| Audiofile | Audiofile | Versions 0.3.0, 0.3.1, 0.3.2, 0.3.3, 0.3.4, 0.3.5 |
| Canonical | Ubuntu Linux | Version 14.04 |