https://vulnerability.circl.lu Contains only the most 10 recent entries. http://www.rssboard.org/rss-specification python-feedgen en Wed, 30 Sep 2026 23:06:06 +0000 https://vulnerability.circl.lu/vuln/cve-2021-4156 <p><strong>Affected:</strong> libsndfile</p> <p>An out-of-bounds read flaw was found in libsndfile&#39;s FLAC codec functionality. An attacker who is able to submit a specially crafted file (via tricking a user to open or otherwise) to an application linked with libsndfile and using the FLAC codec, could trigger an out-of-bounds read that would most likely cause a crash but could potentially leak memory information that could be used in further exploitation of other flaws.</p> <p><strong>Affected:</strong> libsndfile</p> <p>An out-of-bounds read flaw was found in libsndfile&#39;s FLAC codec functionality. An attacker who is able to submit a specially crafted file (via tricking a user to open or otherwise) to an application linked with libsndfile and using the FLAC codec, could trigger an out-of-bounds read that would most likely cause a crash but could potentially leak memory information that could be used in further exploitation of other flaws.</p> https://vulnerability.circl.lu/vuln/cve-2021-4156 https://vulnerability.circl.lu/vuln/usn-5409-1 <p><strong>Affected:</strong> Ubuntu:Pro:16.04:LTS: libsndfile</p> <p>It was discovered that libsndfile was incorrectly performing memory management operations and incorrectly using buffers when executing its FLAC codec. If a user or automated system were tricked into processing a specially crafted sound file, an attacker could possibly use this issue to cause a denial of service or obtain sensitive information.</p> <p><strong>Affected:</strong> Ubuntu:Pro:16.04:LTS: libsndfile</p> <p>It was discovered that libsndfile was incorrectly performing memory management operations and incorrectly using buffers when executing its FLAC codec. If a user or automated system were tricked into processing a specially crafted sound file, an attacker could possibly use this issue to cause a denial of service or obtain sensitive information.</p> https://vulnerability.circl.lu/vuln/usn-5409-1