← All advisories

Unrated severityNVD Advisory· Published Oct 27, 2024· Updated Oct 30, 2024

CVE-2024-50612

CVE-2024-50612

Description

libsndfile through 1.2.2 has an ogg_vorbis.c vorbis_analysis_wrote out-of-bounds read.

AI Insight

LLM-synthesized narrative grounded in this CVE's description and references.

Affected products

6

libsndfile/libsndfiledescription
Libsndfile Project/Libsndfilellm-fuzzy
Range: <=1.2.2
osv-coords4 versions
pkg:rpm/almalinux/libsndfile pkg:rpm/almalinux/libsndfile-devel pkg:rpm/almalinux/libsndfile-utils pkg:rpm/opensuse/libsndfile&distro=openSUSE%20Tumbleweed
< 1.0.28-16.el8_10+ 3 more
- (no CPE)range: < 1.0.28-16.el8_10
- (no CPE)range: < 1.0.28-16.el8_10
- (no CPE)range: < 1.0.28-16.el8_10
- (no CPE)range: < 1.2.2-3.1

Patches

Vulnerability mechanics

References

1

github.com/libsndfile/libsndfile/issues/1035mitre

News mentions

0

No linked articles in our index yet.