CVE-2019-16092

Symonics libmysofa 0.7 has a NULL pointer dereference in getHrtf in hrtf/reader.c.

9.8 CriticalFix available

Symonics libmysofa 0.7 has a NULL pointer dereference in getHrtf in hrtf/reader.c.

Attack profile

How easy it is to exploit

Attack vector: Network
Complexity: Low
Privileges needed: None
User interaction: None

What an attacker can affect

Confidentiality: High
Integrity: High
Availability: High

Exploit likelihood

1.53%Up 0.9 points since Apr 14, 2021

What each source reports

NVD Score used 9.8

Symonics libmysofa 0.7 has a NULL pointer dereference in getHrtf in hrtf/reader.c.

Record: CVE-2019-16092
CVSS 3.1: 9.8 CriticalCVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
CVSS 2.0: 7.5 HighAV:N/AC:L/Au:N/C:P/I:P/A:P
Weakness: CWE-476
Updated: 2026-11-02

CVE List No score

Symonics libmysofa 0.7 has a NULL pointer dereference in getHrtf in hrtf/reader.c.

Record: CVE-2019-16092
Updated: 2026-11-02

EUVDEUVD-2019-6938 No score

Symonics libmysofa 0.7 has a NULL pointer dereference in getHrtf in hrtf/reader.c.

Record: EUVD-2019-6938
Updated: 2026-11-03

GitHub AdvisoriesGHSA-rm26-p3f9-59xv 9.8

Symonics libmysofa 0.7 has a NULL pointer dereference in getHrtf in hrtf/reader.c.

Symonics libmysofa 0.7 has a NULL pointer dereference in getHrtf in hrtf/reader.c.

Record: GHSA-rm26-p3f9-59xv
CVSS 3.1: 9.8 CriticalCVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
Weakness: CWE-476
Updated: 2026-11-02

OSV 9.8

Symonics libmysofa 0.7 has a NULL pointer dereference in getHrtf in hrtf/reader.c.

Record: CVE-2019-16092
CVSS 3.1: 9.8 CriticalCVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
Updated: 2026-11-02

OSVDEBIAN-CVE-2019-16092 9.8

Symonics libmysofa 0.7 has a NULL pointer dereference in getHrtf in hrtf/reader.c.

Record: DEBIAN-CVE-2019-16092
CVSS 3.1: 9.8 CriticalCVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
Updated: 2026-11-02

Show 5 moreShow less

OSVUBUNTU-CVE-2019-16092 9.8

Symonics libmysofa 0.7 has a NULL pointer dereference in getHrtf in hrtf/reader.c.

Record: UBUNTU-CVE-2019-16092
CVSS 3.1: 9.8 CriticalCVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
CVSS 3.0: 9.8 CriticalCVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
Updated: 2026-11-02

OSVopenSUSE-SU-2021:0444-1 No score

Security update for libmysofa

This update for libmysofa fixes the following issues:

Added security backports: gh#hoene/libmysofa#136 - CVE-2020-36152 - boo#1181977 gh#hoene/libmysofa#138 - CVE-2020-36148 - boo#1181981 gh#hoene/libmysofa#137 - CVE-2020-36149 - boo#1181980 gh#hoene/libmysofa#134 - CVE-2020-36151 - boo#1181978 gh#hoene/libmysofa#135 - CVE-2020-36150 - boo#1181979 gh#hoene/libmysofa#96 - CVE-2020-6860 - boo#1182883

Update to version 0.9.1

Extended angular neighbor search to 'close the sphere'
Added and exposed mysofa_getfilter_float_nointerp method
Fixed various security issues CVE-2019-16091 - boo#1149919 CVE-2019-16092 - boo#1149920 CVE-2019-16093 - boo#1149922 CVE-2019-16094 - boo#1149924 CVE-2019-16095 - boo#1149926 CVE-2019-20016 - boo#1159839 CVE-2019-20063 - boo#1160040

Record: openSUSE-SU-2021:0444-1
Updated: 2026-11-02

OSVopenSUSE-SU-2021:0459-1 No score

Security update for libmysofa

This update for libmysofa fixes the following issues:

Added security backports: gh#hoene/libmysofa#136 - CVE-2020-36152 - boo#1181977 gh#hoene/libmysofa#138 - CVE-2020-36148 - boo#1181981 gh#hoene/libmysofa#137 - CVE-2020-36149 - boo#1181980 gh#hoene/libmysofa#134 - CVE-2020-36151 - boo#1181978 gh#hoene/libmysofa#135 - CVE-2020-36150 - boo#1181979 gh#hoene/libmysofa#96 - CVE-2020-6860 - boo#1182883

Update to version 0.9.1

Extended angular neighbor search to 'close the sphere'
Added and exposed mysofa_getfilter_float_nointerp method
Fixed various security issues CVE-2019-16091 - boo#1149919 CVE-2019-16092 - boo#1149920 CVE-2019-16093 - boo#1149922 CVE-2019-16094 - boo#1149924 CVE-2019-16095 - boo#1149926 CVE-2019-20016 - boo#1159839 CVE-2019-20063 - boo#1160040

This update was imported from the openSUSE:Leap:15.2:Update update project.

Record: openSUSE-SU-2021:0459-1
Updated: 2026-11-02

OSVopenSUSE-SU-2024:10960-1 No score

libmysofa-devel-1.2-1.3 on GA media

These are all security issues fixed in the libmysofa-devel-1.2-1.3 package on the GA media of openSUSE Tumbleweed.

Record: openSUSE-SU-2024:10960-1
Updated: 2026-11-02

OSVUSN-4473-1 No score

libmysofa vulnerabilities

It was discovered that libmysofa incorrectly handled certain input files. An attacker could possibly use this issue to cause a denial of service or other unspecified impact. (CVE-2019-16091, CVE-2019-16092, CVE-2019-16093, CVE-2019-16094, CVE-2019-16095)

Record: USN-4473-1
Updated: 2026-11-02

Affected products

Affected packages

Affected packages
Package	Affected	Fixed
`libmysofa` Debian:12	before 0.8~dfsg0-1	0.8~dfsg0-1
`libmysofa` Debian:13	before 0.8~dfsg0-1	0.8~dfsg0-1
`libmysofa` Debian:14	before 0.8~dfsg0-1	0.8~dfsg0-1
`libmysofa` Ubuntu:18.04:LTS	before 0.6~dfsg0-3+deb10u1build1, plus listed versions 0.6~dfsg0-10.6~dfsg0-20.6~dfsg0-2ubuntu0.18.04.1	0.6~dfsg0-3+deb10u1build1
`libmysofa` openSUSE:Leap 15.2	before 0.9.1-lp152.3.3.1	0.9.1-lp152.3.3.1
`libmysofa` SUSE:Package Hub 15 SP2	before 0.9.1-bp152.4.3.1	0.9.1-bp152.4.3.1

History

History
Recorded	Changed	Sources
Nov 3, 2026	aliases	EUVD
Nov 2, 2026	first indexed	CVE List, GitHub Advisories, NVD, OSV

Dates are when Every CVE recorded each change. Upstream dates may differ.

In short

CVE-2019-16092 is a critical vulnerability (CVSS 9.8) in Symonics Libmysofa, published September 8, 2019. No source lists public exploit code. EPSS puts the chance of exploitation in the next 30 days at 1.53%, the 74th percentile. Fixed in libmysofa 0.8~dfsg0-1.

References

Show 36 moreShow less