Medium severity5.5OSV Advisory· Published Mar 21, 2019· Updated Jun 17, 2026
CVE-2019-3832
CVE-2019-3832
Description
It was discovered the fix for CVE-2018-19758 (libsndfile) was not complete and still allows a read beyond the limits of a buffer in wav_write_header() function in wav.c. A local attacker may use this flaw to make the application crash.
AI Insight
LLM-synthesized narrative grounded in this CVE's description and references.
Affected products
71.0.25, 1.0.26, 1.0.27, …+ 2 more
- (no CPE)range: 1.0.25, 1.0.26, 1.0.27, …
- cpe:2.3:a:libsndfile_project:libsndfile:1.0.28:*:*:*:*:*:*:*
- (no CPE)
cpe:2.3:o:canonical:ubuntu_linux:16.04:*:*:*:esm:*:*:*+ 2 more
- cpe:2.3:o:canonical:ubuntu_linux:16.04:*:*:*:esm:*:*:*
- cpe:2.3:o:canonical:ubuntu_linux:18.04:*:*:*:lts:*:*:*
- cpe:2.3:o:canonical:ubuntu_linux:18.10:*:*:*:*:*:*:*
Patches
Vulnerability mechanics
References
6- bugzilla.redhat.com/show_bug.cginvdIssue TrackingPatchThird Party Advisory
- github.com/erikd/libsndfile/pull/460nvdPatchThird Party Advisory
- github.com/erikd/libsndfile/issues/456nvdExploitThird Party Advisory
- lists.debian.org/debian-lts-announce/2020/10/msg00030.htmlnvdMailing ListThird Party Advisory
- security.gentoo.org/glsa/202007-65nvdThird Party Advisory
- usn.ubuntu.com/4013-1/nvdThird Party Advisory
News mentions
0No linked articles in our index yet.