Medium severity5.5NVD Advisory· Published Oct 27, 2024· Updated Jun 17, 2026
CVE-2024-50612
CVE-2024-50612
Description
libsndfile through 1.2.2 has an ogg_vorbis.c vorbis_analysis_wrote out-of-bounds read.
AI Insight
LLM-synthesized narrative grounded in this CVE's description and references.
Affected products
7cpe:2.3:a:libsndfile_project:libsndfile:*:*:*:*:*:*:*:*+ 1 more
- cpe:2.3:a:libsndfile_project:libsndfile:*:*:*:*:*:*:*:*range: <=1.2.2
- (no CPE)range: <=1.2.2
- libsndfile/libsndfiledescription
- osv-coords4 versionspkg:rpm/almalinux/libsndfilepkg:rpm/almalinux/libsndfile-develpkg:rpm/almalinux/libsndfile-utilspkg:rpm/opensuse/libsndfile&distro=openSUSE%20Tumbleweed
< 1.0.28-16.el8_10+ 3 more
- (no CPE)range: < 1.0.28-16.el8_10
- (no CPE)range: < 1.0.28-16.el8_10
- (no CPE)range: < 1.0.28-16.el8_10
- (no CPE)range: < 1.2.2-3.1
Patches
Vulnerability mechanics
References
1- github.com/libsndfile/libsndfile/issues/1035nvdExploitThird Party Advisory
News mentions
0No linked articles in our index yet.