Every CVE Search/ Get API key

CVE-2018-14044

The RateTransposer::setChannels function in RateTransposer.cpp in libSoundTouch.a in Olli...

7.5 HighFix available

The RateTransposer::setChannels function in RateTransposer.cpp in libSoundTouch.a in Olli Parviainen SoundTouch 2.0 allows remote attackers to cause a denial of service (assertion failure and application exit), as demonstrated by SoundStretch.

Attack profile

How easy it is to exploit

Attack vector
Network
Complexity
Low
Privileges needed
None
User interaction
None

What an attacker can affect

Confidentiality
None
Integrity
None
Availability
High

Exploit likelihood

2.60%Up 2.0 points since Apr 14, 2021
90%50%10%1%

What each source reports

NVD Score used 7.5

The RateTransposer::setChannels function in RateTransposer.cpp in libSoundTouch.a in Olli Parviainen SoundTouch 2.0 allows remote attackers to cause a denial of service (assertion failure and application exit), as demonstrated by SoundStretch.

Record
CVE-2018-14044
CVSS 3.0
7.5 HighCVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H
CVSS 2.0
5.0 MediumAV:N/AC:L/Au:N/C:N/I:N/A:P
Weakness
CWE-617
Updated
2026-11-02
CVE List No score

The RateTransposer::setChannels function in RateTransposer.cpp in libSoundTouch.a in Olli Parviainen SoundTouch 2.0 allows remote attackers to cause a denial of service (assertion failure and application exit), as demonstrated by SoundStretch.

Record
CVE-2018-14044
Updated
2026-11-02
EUVDEUVD-2018-5971 No score

The RateTransposer::setChannels function in RateTransposer.cpp in libSoundTouch.a in Olli Parviainen SoundTouch 2.0 allows remote attackers to cause a denial of service (assertion failure and application exit), as demonstrated by SoundStretch.

Record
EUVD-2018-5971
Updated
2026-11-03
GitHub AdvisoriesGHSA-7428-4gff-5vvx 7.5

The RateTransposer::setChannels function in RateTransposer.cpp in libSoundTouch.a in Olli...

The RateTransposer::setChannels function in RateTransposer.cpp in libSoundTouch.a in Olli Parviainen SoundTouch 2.0 allows remote attackers to cause a denial of service (assertion failure and application exit), as demonstrated by SoundStretch.

Record
GHSA-7428-4gff-5vvx
CVSS 3.0
7.5 HighCVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H
Weakness
CWE-617
Updated
2026-11-02
OSV 7.5

The RateTransposer::setChannels function in RateTransposer.cpp in libSoundTouch.a in Olli Parviainen SoundTouch 2.0 allows remote attackers to cause a denial of service (assertion failure and application exit), as demonstrated by SoundStretch.

Record
CVE-2018-14044
CVSS 3.0
7.5 HighCVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H
Updated
2026-11-02
OSVDEBIAN-CVE-2018-14044 7.5

The RateTransposer::setChannels function in RateTransposer.cpp in libSoundTouch.a in Olli Parviainen SoundTouch 2.0 allows remote attackers to cause a denial of service (assertion failure and application exit), as demonstrated by SoundStretch.

Record
DEBIAN-CVE-2018-14044
CVSS 3.0
7.5 HighCVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H
Updated
2026-11-02
OSVUBUNTU-CVE-2018-14044 7.5

The RateTransposer::setChannels function in RateTransposer.cpp in libSoundTouch.a in Olli Parviainen SoundTouch 2.0 allows remote attackers to cause a denial of service (assertion failure and application exit), as demonstrated by SoundStretch.

Record
UBUNTU-CVE-2018-14044
CVSS 3.0
7.5 HighCVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H
Updated
2026-11-02
OSVMGASA-2018-0385 No score

Updated soundtouch packages fix security vulnerability

Updated soundtouch package fixes security vulnerabilities:

  • Reachable assertion in FIRFilter.cpp causing denial of service (CVE-2018-14045).
  • Reachable assertion in RateTransposer::setChannels() causing denial of service (CVE-2018-14044).
  • Heap-based buffer overflow in SoundStretch/WavFile.cpp:WavInFile::readHeaderBlock() potentially leading to code execution (CVE-2018-1000223).
Record
MGASA-2018-0385
Updated
2026-11-02
OSVMGASA-2020-0193 No score

Updated dolphin-emu packages fix security vulnerability

Updated dolphin-emu package fixes security vulnerabilities

Dolphin Emulator includes a modified copy of the SoundTouch library at version 1.9.2. That version is subject to the following security issues:

  • The TDStretch::processSamples function in source/SoundTouch/TDStretch.cpp in SoundTouch 1.9.2 allows remote attackers to cause a denial of service (infinite loop and CPU consumption) via a crafted wav file (CVE-2017-9258)

  • The TDStretch::acceptNewOverlapLength function in source/SoundTouch/ TDStretch.cpp in SoundTouch 1.9.2 allows remote attackers to cause a denial of service (memory allocation error and application crash) via a crafted wav file (CVE-2017-9259).

  • The TDStretchSSE::calcCrossCorr function in source/SoundTouch/ sse_optimized.cpp in SoundTouch 1.9.2 allows remote attackers to cause a denial of service (heap-based buffer over-read and application crash) via a crafted wav file (CVE-2017-9260).

  • Reachable assertion in RateTransposer::setChannels() causing denial of service (CVE-2018-14044).

  • Reachable assertion in FIRFilter.cpp causing denial of service (CVE-2018-14045).

  • Assertion failure in BPMDetect class in BPMDetect.cpp (CVE-2018-17096).

  • Out-of-bounds heap write in WavOutFile::write() (CVE-2018-17097).

  • Heap corruption in WavFileBase class in WavFile.cpp (CVE-2018-17098).

  • Heap-based buffer overflow in SoundStretch/WavFile.cpp:WavInFile ::readHeaderBlock() potentially leading to code execution (CVE-2018-1000223).

The bundled copy of SoundTouch was updated to version 2.1.2, thereby solving theses issues in Dolphin Emulator.

Record
MGASA-2020-0193
Updated
2026-11-02

Affected products

Affected packages

Affected packages
PackageAffectedFixed
soundtouch
Debian:12
 before 2.1.2+ds1-1
2.1.2+ds1-1
soundtouch
Debian:13
 before 2.1.2+ds1-1
2.1.2+ds1-1
soundtouch
Debian:14
 before 2.1.2+ds1-1
2.1.2+ds1-1
soundtouch
Mageia:6
From an advisory covering 3 CVEs
 before 1.9.2-2.2.mga6
1.9.2-2.2.mga6
dolphin-emu
Mageia:7
From an advisory covering 9 CVEs
 before 5.0.11824-1.mga7.tainted
5.0.11824-1.mga7.tainted
soundtouch
Ubuntu:Pro:14.04:LTS
 All versions, plus listed versions
1.7.1-21.7.1-41.7.1-51.7.1-5ubuntu0.1~esm1
 None known
soundtouch
Ubuntu:Pro:16.04:LTS
 All versions, plus listed versions
1.9.0-11.9.2-21.9.2-2+deb9u1build0.16.04.11.9.2-2+deb9u1ubuntu0.1~esm1
 None known
soundtouch
Ubuntu:Pro:18.04:LTS
 All versions, plus listed versions
1.9.2-21.9.2-31.9.2-3ubuntu0.1~esm1
 None known

History

History
RecordedChangedSources
affected, facts
aliasesEUVD
first indexedCVE List, GitHub Advisories, NVD, OSV

Dates are when Every CVE recorded each change. Upstream dates may differ.

In short

CVE-2018-14044 is a high vulnerability (CVSS 7.5) in Surina Soundtouch, published July 13, 2018. No source lists public exploit code. EPSS puts the chance of exploitation in the next 30 days at 2.60%, the 85th percentile. Fixed in soundtouch 2.1.2+ds1-1.

References

Show 9 moreShow less
Pages All vulnerabilities Browse Docs Sources Guide Get API key
MoveEnter Open