{"id":"CVE-2017-12562","aliases":["ALPINE-CVE-2017-12562","BELL-CVE-2017-12562","DEBIAN-CVE-2017-12562","DLA-1049-1","DLA-3058-1","EUVD-2017-4134","GHSA-52w2-9c5h-2xqj","MGASA-2017-0338","UBUNTU-CVE-2017-12562","USN-4704-1","openSUSE-SU-2024:10992-1"],"status":"published","title":"Heap-based Buffer Overflow in the psf_binheader_writef function in common.c in libsndfile through...","description":"Heap-based Buffer Overflow in the psf_binheader_writef function in common.c in libsndfile through 1.0.28 allows remote attackers to cause a denial of service (application crash) or possibly have unspecified other impact.","severity":{"version":"3.1","score":9.8,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H","level":"critical","assessor":"primary","from":"nvd"},"epss":{"day":"2026-11-08","score":0.03978,"percentile":0.90558,"model":"v2026.06.15"},"facts":{"in_kev":false,"known_exploited":false,"public_exploit":false,"fix_available":true},"cwes":["CWE-119"],"published":"2017-08-05T17:00:00Z","modified":"2026-10-20T10:47:52Z","fixes":[{"ecosystem":"Alpine:v3.10","package":"libsndfile","fixed_in":["1.0.28-r2"],"sources":["osv"]},{"ecosystem":"Alpine:v3.11","package":"libsndfile","fixed_in":["1.0.28-r2"],"sources":["osv"]},{"ecosystem":"Alpine:v3.12","package":"libsndfile","fixed_in":["1.0.28-r2"],"sources":["osv"]},{"ecosystem":"Alpine:v3.13","package":"libsndfile","fixed_in":["1.0.28-r2"],"sources":["osv"]},{"ecosystem":"Alpine:v3.14","package":"libsndfile","fixed_in":["1.0.28-r2"],"sources":["osv"]},{"ecosystem":"Alpine:v3.15","package":"libsndfile","fixed_in":["1.0.28-r2"],"sources":["osv"]},{"ecosystem":"Alpine:v3.16","package":"libsndfile","fixed_in":["1.0.28-r2"],"sources":["osv"]},{"ecosystem":"Alpine:v3.17","package":"libsndfile","fixed_in":["1.0.28-r2"],"sources":["osv"]},{"ecosystem":"Alpine:v3.18","package":"libsndfile","fixed_in":["1.0.28-r2"],"sources":["osv"]},{"ecosystem":"Alpine:v3.19","package":"libsndfile","fixed_in":["1.0.28-r2"],"sources":["osv"]},{"ecosystem":"Alpine:v3.20","package":"libsndfile","fixed_in":["1.0.28-r2"],"sources":["osv"]},{"ecosystem":"Alpine:v3.21","package":"libsndfile","fixed_in":["1.0.28-r2"],"sources":["osv"]},{"ecosystem":"Alpine:v3.22","package":"libsndfile","fixed_in":["1.0.28-r2"],"sources":["osv"]},{"ecosystem":"Alpine:v3.23","package":"libsndfile","fixed_in":["1.0.28-r2"],"sources":["osv"]},{"ecosystem":"Alpine:v3.24","package":"libsndfile","fixed_in":["1.0.28-r2"],"sources":["osv"]},{"ecosystem":"Alpine:v3.3","package":"libsndfile","fixed_in":["1.0.28-r2"],"sources":["osv"]},{"ecosystem":"Alpine:v3.4","package":"libsndfile","fixed_in":["1.0.28-r2"],"sources":["osv"]},{"ecosystem":"Alpine:v3.5","package":"libsndfile","fixed_in":["1.0.28-r2"],"sources":["osv"]},{"ecosystem":"Alpine:v3.6","package":"libsndfile","fixed_in":["1.0.28-r2"],"sources":["osv"]},{"ecosystem":"Alpine:v3.7","package":"libsndfile","fixed_in":["1.0.28-r2"],"sources":["osv"]},{"ecosystem":"Alpine:v3.8","package":"libsndfile","fixed_in":["1.0.28-r2"],"sources":["osv"]},{"ecosystem":"Alpine:v3.9","package":"libsndfile","fixed_in":["1.0.28-r2"],"sources":["osv"]},{"ecosystem":"Debian:12","package":"libsndfile","fixed_in":["1.0.28-3"],"sources":["osv"]},{"ecosystem":"Debian:13","package":"libsndfile","fixed_in":["1.0.28-3"],"sources":["osv"]},{"ecosystem":"Debian:14","package":"libsndfile","fixed_in":["1.0.28-3"],"sources":["osv"]},{"ecosystem":"Debian:7","package":"libsndfile","fixed_in":["1.0.25-9.1+deb7u4"],"sources":["osv"]},{"ecosystem":"Mageia:5","package":"libsndfile","fixed_in":["1.0.25-9.4.mga5"],"sources":["osv"]},{"ecosystem":"Mageia:6","package":"libsndfile","fixed_in":["1.0.28-3.1.mga6"],"sources":["osv"]},{"ecosystem":"Ubuntu:Pro:14.04:LTS","package":"libsndfile","fixed_in":["1.0.25-7ubuntu2.2+esm1"],"sources":["osv"]},{"ecosystem":"Ubuntu:16.04:LTS","package":"libsndfile","fixed_in":["1.0.25-10ubuntu0.16.04.3"],"sources":["osv"]}],"affected":[{"source":"osv","ecosystem":"Alpine:v3.10","package":"libsndfile","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.0.28-r2"}]}]},{"source":"osv","ecosystem":"Alpine:v3.11","package":"libsndfile","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.0.28-r2"}]}]},{"source":"osv","ecosystem":"Alpine:v3.12","package":"libsndfile","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.0.28-r2"}]}]},{"source":"osv","ecosystem":"Alpine:v3.13","package":"libsndfile","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.0.28-r2"}]}]},{"source":"osv","ecosystem":"Alpine:v3.14","package":"libsndfile","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.0.28-r2"}]}]},{"source":"osv","ecosystem":"Alpine:v3.15","package":"libsndfile","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.0.28-r2"}]}]},{"source":"osv","ecosystem":"Alpine:v3.16","package":"libsndfile","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.0.28-r2"}]}]},{"source":"osv","ecosystem":"Alpine:v3.17","package":"libsndfile","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.0.28-r2"}]}]},{"source":"osv","ecosystem":"Alpine:v3.18","package":"libsndfile","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.0.28-r2"}]}]},{"source":"osv","ecosystem":"Alpine:v3.19","package":"libsndfile","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.0.28-r2"}]}]},{"source":"osv","ecosystem":"Alpine:v3.20","package":"libsndfile","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.0.28-r2"}]}]},{"source":"osv","ecosystem":"Alpine:v3.21","package":"libsndfile","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.0.28-r2"}]}]},{"source":"osv","ecosystem":"Alpine:v3.22","package":"libsndfile","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.0.28-r2"}]}]},{"source":"osv","ecosystem":"Alpine:v3.23","package":"libsndfile","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.0.28-r2"}]}]},{"source":"osv","ecosystem":"Alpine:v3.24","package":"libsndfile","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.0.28-r2"}]}]},{"source":"osv","ecosystem":"Alpine:v3.3","package":"libsndfile","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.0.28-r2"}]}]},{"source":"osv","ecosystem":"Alpine:v3.4","package":"libsndfile","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.0.28-r2"}]}]},{"source":"osv","ecosystem":"Alpine:v3.5","package":"libsndfile","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.0.28-r2"}]}]},{"source":"osv","ecosystem":"Alpine:v3.6","package":"libsndfile","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.0.28-r2"}]}]},{"source":"osv","ecosystem":"Alpine:v3.7","package":"libsndfile","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.0.28-r2"}]}]},{"source":"osv","ecosystem":"Alpine:v3.8","package":"libsndfile","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.0.28-r2"}]}]},{"source":"osv","ecosystem":"Alpine:v3.9","package":"libsndfile","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.0.28-r2"}]}]},{"source":"osv","ecosystem":"Debian:12","package":"libsndfile","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.0.28-3"}]}]},{"source":"osv","ecosystem":"Debian:13","package":"libsndfile","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.0.28-3"}]}]},{"source":"osv","ecosystem":"Debian:14","package":"libsndfile","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.0.28-3"}]}]},{"source":"osv","ecosystem":"Debian:7","package":"libsndfile","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.0.25-9.1+deb7u4"}]}],"versions":["1.0.25-5","1.0.25-6","1.0.25-7","1.0.25-8","1.0.25-9","1.0.25-9.1","1.0.25-9.1+deb7u1","1.0.25-9.1+deb7u2","1.0.25-9.1+deb7u3"]},{"source":"osv","ecosystem":"Debian:9","package":"libsndfile","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.0.27-3+deb9u3"}]}],"versions":["1.0.27-3","1.0.27-3+deb9u1","1.0.27-3+deb9u2"],"bundled":2},{"source":"osv","ecosystem":"Mageia:5","package":"libsndfile","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.0.25-9.4.mga5"}]}]},{"source":"osv","ecosystem":"Mageia:6","package":"libsndfile","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.0.28-3.1.mga6"}]}]},{"source":"osv","ecosystem":"Ubuntu:Pro:14.04:LTS","package":"libsndfile","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.0.25-7ubuntu2.2+esm1"}]}],"versions":["1.0.25-7ubuntu1","1.0.25-7ubuntu2","1.0.25-7ubuntu2.1","1.0.25-7ubuntu2.2"]},{"source":"osv","ecosystem":"Ubuntu:16.04:LTS","package":"libsndfile","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.0.25-10ubuntu0.16.04.3"}]}],"versions":["1.0.25-9.1","1.0.25-10","1.0.25-10ubuntu0.16.04.1","1.0.25-10ubuntu0.16.04.2"]},{"source":"osv","ecosystem":"Ubuntu:Pro:14.04:LTS","package":"libsndfile","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.0.25-7ubuntu2.2+esm1"}]}],"versions":["1.0.25-7ubuntu1","1.0.25-7ubuntu2","1.0.25-7ubuntu2.1","1.0.25-7ubuntu2.2"],"bundled":12},{"source":"osv","ecosystem":"Ubuntu:16.04:LTS","package":"libsndfile","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.0.25-10ubuntu0.16.04.3"}]}],"versions":["1.0.25-9.1","1.0.25-10","1.0.25-10ubuntu0.16.04.1","1.0.25-10ubuntu0.16.04.2"],"bundled":12},{"source":"osv","ecosystem":"openSUSE:Tumbleweed","package":"libsndfile","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.0.31-2.2"}]}],"bundled":15}],"products":[{"vendor":"debian","product":"debian_linux"},{"vendor":"libsndfile_project","product":"libsndfile"}],"references":[{"url":"https://github.com/erikd/libsndfile/issues/292","tags":["x_refsource_CONFIRM","x_transferred","Issue Tracking","Patch","Third Party Advisory","fix"]},{"url":"https://security.gentoo.org/glsa/201811-23","tags":["vendor-advisory","x_refsource_GENTOO","x_transferred","Third Party Advisory","advisory"]},{"url":"https://lists.debian.org/debian-lts-announce/2022/06/msg00020.html","tags":["mailing-list","x_refsource_MLIST","x_transferred","Mailing List","Third Party Advisory","advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2017-12562"},{"url":"https://github.com/advisories/GHSA-52w2-9c5h-2xqj"},{"url":"https://security.alpinelinux.org/vuln/CVE-2017-12562","tags":["advisory"]},{"url":"https://docs.bell-sw.com/security/cves/CVE-2017-12562","tags":["advisory"]},{"url":"https://security-tracker.debian.org/tracker/CVE-2017-12562","tags":["advisory"]},{"url":"https://advisories.mageia.org/MGASA-2017-0338.html","tags":["advisory"]},{"url":"https://bugs.mageia.org/show_bug.cgi?id=21618","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1483140","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2017-12562","tags":["report"]},{"url":"https://ubuntu.com/security/notices/USN-4704-1","tags":["advisory"]},{"url":"https://www.cve.org/CVERecord?id=CVE-2017-12562","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2017-6892","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2017-14245","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2017-14246","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2017-14634","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2017-16942","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2018-13139","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2018-19432","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2018-19661","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2018-19662","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2018-19758","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2019-3832","tags":["report"]},{"url":"","tags":["advisory"]},{"url":"https://www.suse.com/security/cve/CVE-2007-4974","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2017-12562","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2017-14245","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2017-14246","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2017-14634","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2017-17456","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2017-17457","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2017-6892","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2017-7585","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2017-8361","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2017-8365","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2018-13139","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2018-19432","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2018-19758","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2021-3246","tags":["web"]}],"sources":{"cve":[{"id":"CVE-2017-12562","description":"Heap-based Buffer Overflow in the psf_binheader_writef function in common.c in libsndfile through 1.0.28 allows remote attackers to cause a denial of service (application crash) or possibly have unspecified other impact.","status":"published","published":"2017-08-05T17:00:00Z","modified":"2024-08-05T18:43:55.934Z","updated_at":"2026-11-02T14:33:17.264801Z"}],"euvd":[{"id":"EUVD-2017-4134","description":"Heap-based Buffer Overflow in the psf_binheader_writef function in common.c in libsndfile through 1.0.28 allows remote attackers to cause a denial of service (application crash) or possibly have unspecified other impact.","status":"published","published":"2017-08-05T17:00:00Z","modified":"2024-08-05T18:43:55Z","updated_at":"2026-11-03T02:23:21.159659Z"}],"ghsa":[{"id":"GHSA-52w2-9c5h-2xqj","title":"Heap-based Buffer Overflow in the psf_binheader_writef function in common.c in libsndfile through...","description":"Heap-based Buffer Overflow in the psf_binheader_writef function in common.c in libsndfile through 1.0.28 allows remote attackers to cause a denial of service (application crash) or possibly have unspecified other impact.","status":"published","published":"2022-05-14T01:54:31Z","modified":"2023-01-28T05:00:36Z","cvss":[{"version":"3.0","score":9.8,"vector":"CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H","level":"critical"}],"cwes":["CWE-119"],"updated_at":"2026-11-02T14:43:22.817498Z"}],"nvd":[{"id":"CVE-2017-12562","description":"Heap-based Buffer Overflow in the psf_binheader_writef function in common.c in libsndfile through 1.0.28 allows remote attackers to cause a denial of service (application crash) or possibly have unspecified other impact.","status":"published","published":"2017-08-05T17:29:00.16Z","modified":"2026-06-17T01:03:30.683Z","cvss":[{"version":"3.1","score":9.8,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H","level":"critical","assessor":"primary"},{"version":"2.0","score":7.5,"vector":"AV:N/AC:L/Au:N/C:P/I:P/A:P","level":"high","assessor":"primary"}],"cwes":["CWE-119"],"updated_at":"2026-11-02T14:03:57.282351Z"}],"osv":[{"id":"ALPINE-CVE-2017-12562","description":"Heap-based Buffer Overflow in the psf_binheader_writef function in common.c in libsndfile through 1.0.28 allows remote attackers to cause a denial of service (application crash) or possibly have unspecified other impact.","status":"published","published":"2017-08-05T17:29:00.16Z","modified":"2026-06-15T18:18:06.761918579Z","cvss":[{"version":"3.1","score":9.8,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H","level":"critical"}],"updated_at":"2026-11-02T15:27:46.716249Z"},{"id":"BELL-CVE-2017-12562","title":"CVE-2017-12562 does not affect BellSoft software","status":"withdrawn","published":"2023-08-31T12:16:08.703003Z","modified":"2026-01-26T09:48:18.402668Z","cvss":[{"version":"3.1","score":9.8,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H","level":"critical"}],"updated_at":"2026-11-02T15:28:14.137943Z"},{"id":"CVE-2017-12562","description":"Heap-based Buffer Overflow in the psf_binheader_writef function in common.c in libsndfile through 1.0.28 allows remote attackers to cause a denial of service (application crash) or possibly have unspecified other impact.","status":"published","published":"2017-08-05T17:29:00.16Z","modified":"2026-10-20T10:47:52.26672638Z","cvss":[{"version":"3.1","score":9.8,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H","level":"critical"}],"updated_at":"2026-11-02T15:44:04.159616Z"},{"id":"DEBIAN-CVE-2017-12562","description":"Heap-based Buffer Overflow in the psf_binheader_writef function in common.c in libsndfile through 1.0.28 allows remote attackers to cause a denial of service (application crash) or possibly have unspecified other impact.","status":"published","published":"2017-08-05T17:29:00.16Z","modified":"2026-09-01T20:03:42.137142465Z","cvss":[{"version":"3.1","score":9.8,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H","level":"critical"}],"updated_at":"2026-11-02T15:45:28.50097Z"},{"id":"UBUNTU-CVE-2017-12562","description":"Heap-based Buffer Overflow in the psf_binheader_writef function in common.c in libsndfile through 1.0.28 allows remote attackers to cause a denial of service (application crash) or possibly have unspecified other impact.","status":"published","published":"2017-08-05T17:29:00Z","modified":"2026-04-22T11:13:13.992824Z","cvss":[{"version":"3.1","score":9.8,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H","level":"critical"},{"version":"3.0","score":9.8,"vector":"CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H","level":"critical"}],"updated_at":"2026-11-02T15:54:14.122973Z"},{"id":"DLA-1049-1","title":"libsndfile - security update","status":"published","published":"2017-08-07T00:00:00Z","modified":"2026-03-09T01:00:52.123396Z","updated_at":"2026-11-02T15:46:09.336894Z"},{"id":"DLA-3058-1","title":"libsndfile - security update","status":"published","published":"2022-06-26T00:00:00Z","modified":"2026-03-09T01:19:18.851722Z","updated_at":"2026-11-02T15:46:11.189256Z"},{"id":"MGASA-2017-0338","title":"Updated libsndfile packages fix security vulnerability","description":"It was discovered that a Heap-based Buffer Overflow in the\npsf_binheader_writef function in common.c in libsndfile through 1.0.28\nallows remote attackers to cause a denial of service (application crash)\nor possibly have unspecified other impact.\n","status":"published","published":"2017-09-14T18:21:43Z","modified":"2026-04-16T06:23:17.422092433Z","updated_at":"2026-11-02T15:49:40.442238Z"},{"id":"openSUSE-SU-2024:10992-1","title":"libsndfile-devel-1.0.31-2.2 on GA media","description":"These are all security issues fixed in the libsndfile-devel-1.0.31-2.2 package on the GA media of openSUSE Tumbleweed.","status":"published","published":"2024-06-15T00:00:00Z","modified":"2025-05-07T18:08:24.600075Z","updated_at":"2026-11-02T16:58:34.894275Z"},{"id":"USN-4704-1","title":"libsndfile vulnerabilities","description":"It was discovered that libsndfile incorrectly handled certain malformed\nfiles. A remote attacker could use this issue to cause libsndfile to\ncrash, resulting in a denial of service, or possibly execute arbitrary\ncode. (CVE-2017-12562)\n\nIt was discovered that libsndfile incorrectly handled certain malformed\nfiles. A remote attacker could use this issue to cause libsndfile to\ncrash, resulting in a denial of service, or possibly execute arbitrary\ncode. This issue only affected Ubuntu 14.04 ESM. (CVE-2017-14245,\nCVE-2017-14246, CVE-2017-14634, CVE-2017-16942, CVE-2017-6892,\nCVE-2018-13139, CVE-2018-19432, CVE-2018-19661, CVE-2018-19662,\nCVE-2018-19758, CVE-2019-3832)\n","status":"published","published":"2021-01-26T16:23:13Z","modified":"2026-06-29T13:48:10.007650252Z","updated_at":"2026-11-02T16:58:15.159055Z"}]}}