CVE-2019-16092

Vulnerability

Symonics libmysofa version 0.7 contains a NULL pointer dereference vulnerability in the getHrtf function located in hrtf/reader.c. The flaw triggers when processing a crafted SOFA (Spatially Oriented Format for Acoustics) file that leads to a NULL pointer being dereferenced, causing a crash. The affected version is 0.7 [1].

Exploitation

An attacker can exploit this vulnerability by providing a specially crafted SOFA file to an application using libmysofa. No authentication is required; the attacker only needs to supply the malicious file to be parsed by the library. The exploitation does not require user interaction beyond opening the file [1].

Impact

Successful exploitation results in a denial of service (DoS) due to a NULL pointer dereference, causing the application to crash. This vulnerability does not lead to remote code execution or data leakage, as the crash is the primary outcome [1].

Mitigation

The issue was fixed in commit f571522...e07edb3 on the libmysofa repository, which was part of a series of commits around late August and early September 2019 [1]. Users should update to a version of libmysofa that includes this fix. As of now, no workaround is available other than avoiding untrusted SOFA files until the library is updated.