CVE-2024-50612
Fixed in a distro release EPSS <1%CVSS 5.3
libsndfile through 1.2.2 has an ogg_vorbis.c vorbis_analysis_wrote out-of-bounds read.
Products: libsndfile_project libsndfile
Distro releases
| Release | Package | Fixed in |
|---|---|---|
| AlmaLinux 8 | libsndfile | 1.0.28-16.el8_10 |
| AlmaLinux 8 | libsndfile-devel | 1.0.28-16.el8_10 |
| AlmaLinux 8 | libsndfile-utils | 1.0.28-16.el8_10 |
| AlmaLinux 9 | libsndfile | 1.0.31-8.el9_5.2 |
| AlmaLinux 9 | libsndfile-devel | 1.0.31-8.el9_5.2 |
| AlmaLinux 9 | libsndfile-utils | 1.0.31-8.el9_5.2 |
| Alpine 3.18 | libsndfile | 1.2.2-r1 |
| Alpine 3.19 | libsndfile | 1.2.2-r1 |
| Alpine 3.20 | libsndfile | 1.2.2-r1 |
| Alpine 3.21 | libsndfile | 1.2.2-r2 |
| Alpine 3.22 | libsndfile | 1.2.2-r2 |
| Alpine 3.23 | libsndfile | 1.2.2-r2 |
| Alpine 3.24 | libsndfile | 1.2.2-r2 |
| Amazon Linux 2023 | libsndfile | 1.2.2-3.amzn2023.0.3 |
| Amazon Linux 2023 | libsndfile-devel | 1.2.2-3.amzn2023.0.3 |
| Amazon Linux 2023 | libsndfile-utils | 1.2.2-3.amzn2023.0.3 |
| Debian 11 | libsndfile | 1.0.31-2+deb11u1 |
| Debian 12 | libsndfile | 1.2.0-1+deb12u1 |
| Debian 13 | libsndfile | 1.2.2-2 |
| Debian 14 | libsndfile | 1.2.2-2 |
| Red Hat Enterprise Linux 8 | libsndfile | 0:1.0.28-16.el8_10 |
| Red Hat Enterprise Linux 8 | libsndfile-debuginfo | 0:1.0.28-16.el8_10 |
| Red Hat Enterprise Linux 8 | libsndfile-debugsource | 0:1.0.28-16.el8_10 |
| Red Hat Enterprise Linux 8 | libsndfile-devel | 0:1.0.28-16.el8_10 |
| Red Hat Enterprise Linux 8 | libsndfile-utils | 0:1.0.28-16.el8_10 |
| Red Hat Enterprise Linux 8 | libsndfile-utils-debuginfo | 0:1.0.28-16.el8_10 |
| Red Hat Enterprise Linux 9 | libsndfile | 0:1.0.31-8.el9_5.2 |
| Red Hat Enterprise Linux 9 | libsndfile-debuginfo | 0:1.0.31-8.el9_5.2 |
| Red Hat Enterprise Linux 9 | libsndfile-debugsource | 0:1.0.31-8.el9_5.2 |
| Red Hat Enterprise Linux 9 | libsndfile-devel | 0:1.0.31-8.el9_5.2 |
| Red Hat Enterprise Linux 9 | libsndfile-utils | 0:1.0.31-8.el9_5.2 |
| Red Hat Enterprise Linux 9 | libsndfile-utils-debuginfo | 0:1.0.31-8.el9_5.2 |
| Red Hat rhel eus 9.4 | libsndfile | 0:1.0.31-8.el9_4.1 |
| Red Hat rhel eus 9.4 | libsndfile-debuginfo | 0:1.0.31-8.el9_4.1 |
| Red Hat rhel eus 9.4 | libsndfile-debugsource | 0:1.0.31-8.el9_4.1 |
| Red Hat rhel eus 9.4 | libsndfile-devel | 0:1.0.31-8.el9_4.1 |
| Red Hat rhel eus 9.4 | libsndfile-utils | 0:1.0.31-8.el9_4.1 |
| Red Hat rhel eus 9.4 | libsndfile-utils-debuginfo | 0:1.0.31-8.el9_4.1 |
| Rocky Linux 8 | libsndfile | 0:1.0.28-16.el8_10 |
| Rocky Linux 9 | libsndfile | 0:1.0.31-8.el9_5.2 |
| Ubuntu 20.04 LTS | libsndfile | 1.0.28-7ubuntu0.3 |
| Ubuntu 22.04 LTS | libsndfile | 1.0.31-2ubuntu0.2 |
| Ubuntu 24.04 LTS | libsndfile | 1.2.2-1ubuntu5.24.04.1 |
| Ubuntu Pro 14.04 LTS | libsndfile | 1.0.25-7ubuntu2.2+esm4 |
| Ubuntu Pro 16.04 LTS | libsndfile | 1.0.25-10ubuntu0.16.04.3+esm4 |
| Ubuntu Pro 18.04 LTS | libsndfile | 1.0.28-4ubuntu0.18.04.2+esm2 |
| openSUSE Tumbleweed | libsndfile | 1.2.2-3.1 |