{"id":"CVE-2020-22219","aliases":["ALSA-2023:5046","ALSA-2023:5048","AZL-28074","CLSA-2026-1788193482","DEBIAN-CVE-2020-22219","DLA-3581-1","DSA-5500-1","EUVD-2020-14984","GHSA-hvp4-qmrj-gvhf","JLSEC-2026-21","MGASA-2023-0277","OESA-2023-1562","RHSA-2023:5042","RHSA-2023:5043","RHSA-2023:5044","RHSA-2023:5045","RHSA-2023:5046","RHSA-2023:5047","RHSA-2023:5048","RLSA-2023:5048","SUSE-SU-2023:3635-1","UBUNTU-CVE-2020-22219","USN-6360-1","USN-6360-2"],"status":"published","title":"Buffer Overflow vulnerability in function bitwriter_grow_ in flac before 1.4.0 allows remote...","description":"Buffer Overflow vulnerability in function bitwriter_grow_ in flac before 1.4.0 allows remote attackers to run arbitrary code via crafted input to the encoder.","severity":{"version":"3.1","score":7.8,"vector":"CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H","level":"high","assessor":"primary","from":"nvd"},"epss":{"day":"2026-11-10","score":0.00794,"percentile":0.56724,"model":"v2026.06.15"},"facts":{"in_kev":false,"known_exploited":false,"public_exploit":false,"fix_available":true},"cwes":["CWE-120"],"published":"2023-08-22T00:00:00Z","modified":"2026-10-29T11:31:30Z","fixes":[{"ecosystem":"AlmaLinux:8","package":"flac","fixed_in":["1.3.2-9.el8_8.1"],"sources":["osv"]},{"ecosystem":"AlmaLinux:8","package":"flac-devel","fixed_in":["1.3.2-9.el8_8.1"],"sources":["osv"]},{"ecosystem":"AlmaLinux:8","package":"flac-libs","fixed_in":["1.3.2-9.el8_8.1"],"sources":["osv"]},{"ecosystem":"AlmaLinux:9","package":"flac","fixed_in":["1.3.3-10.el9_2.1"],"sources":["osv"]},{"ecosystem":"AlmaLinux:9","package":"flac-devel","fixed_in":["1.3.3-10.el9_2.1"],"sources":["osv"]},{"ecosystem":"AlmaLinux:9","package":"flac-libs","fixed_in":["1.3.3-10.el9_2.1"],"sources":["osv"]},{"ecosystem":"Azure Linux:2","package":"flac","fixed_in":["1.4.3-1"],"sources":["osv"]},{"ecosystem":"TuxCare:Ubuntu:18.04","package":"flac","fixed_in":["1.3.2-1ubuntu0.1+tuxcare.els1"],"sources":["osv"]},{"ecosystem":"TuxCare:Ubuntu:18.04","package":"libflac++-dev","fixed_in":["1.3.2-1ubuntu0.1+tuxcare.els1"],"sources":["osv"]},{"ecosystem":"TuxCare:Ubuntu:18.04","package":"libflac++6v5","fixed_in":["1.3.2-1ubuntu0.1+tuxcare.els1"],"sources":["osv"]},{"ecosystem":"TuxCare:Ubuntu:18.04","package":"libflac-dev","fixed_in":["1.3.2-1ubuntu0.1+tuxcare.els1"],"sources":["osv"]},{"ecosystem":"TuxCare:Ubuntu:18.04","package":"libflac-doc","fixed_in":["1.3.2-1ubuntu0.1+tuxcare.els1"],"sources":["osv"]},{"ecosystem":"TuxCare:Ubuntu:18.04","package":"libflac8","fixed_in":["1.3.2-1ubuntu0.1+tuxcare.els1"],"sources":["osv"]},{"ecosystem":"Debian:12","package":"flac","fixed_in":["1.4.1-1"],"sources":["osv"]},{"ecosystem":"Debian:13","package":"flac","fixed_in":["1.4.1-1"],"sources":["osv"]},{"ecosystem":"Debian:14","package":"flac","fixed_in":["1.4.1-1"],"sources":["osv"]},{"ecosystem":"Debian:10","package":"flac","fixed_in":["1.3.2-3+deb10u3"],"sources":["osv"]},{"ecosystem":"Debian:11","package":"flac","fixed_in":["1.3.3-2+deb11u2"],"sources":["osv"]},{"ecosystem":"Julia","package":"FLAC_jll","fixed_in":["1.4.2+0"],"sources":["osv"]},{"ecosystem":"Mageia:8","package":"flac","fixed_in":["1.3.3-3.2.mga8"],"sources":["osv"]},{"ecosystem":"openEuler:20.03-LTS-SP1","package":"flac","fixed_in":["1.3.3-7.oe1"],"sources":["osv"]},{"ecosystem":"openEuler:20.03-LTS-SP3","package":"flac","fixed_in":["1.3.3-7.oe1"],"sources":["osv"]},{"ecosystem":"openEuler:22.03-LTS","package":"flac","fixed_in":["1.3.4-2.oe2203sp2"],"sources":["osv"]},{"ecosystem":"openEuler:22.03-LTS-SP1","package":"flac","fixed_in":["1.3.4-2.oe2203sp1"],"sources":["osv"]},{"ecosystem":"openEuler:22.03-LTS-SP2","package":"flac","fixed_in":["1.3.4-2.oe2203sp2"],"sources":["osv"]},{"ecosystem":"Red Hat:rhel_e4s:8.1::appstream","package":"flac","fixed_in":["0:1.3.2-9.el8_1.1"],"sources":["osv"]},{"ecosystem":"Red Hat:rhel_e4s:8.1::appstream","package":"flac-debuginfo","fixed_in":["0:1.3.2-9.el8_1.1"],"sources":["osv"]},{"ecosystem":"Red Hat:rhel_e4s:8.1::appstream","package":"flac-debugsource","fixed_in":["0:1.3.2-9.el8_1.1"],"sources":["osv"]},{"ecosystem":"Red Hat:rhel_e4s:8.1::appstream","package":"flac-libs","fixed_in":["0:1.3.2-9.el8_1.1"],"sources":["osv"]},{"ecosystem":"Red Hat:rhel_e4s:8.1::appstream","package":"flac-libs-debuginfo","fixed_in":["0:1.3.2-9.el8_1.1"],"sources":["osv"]},{"ecosystem":"Red Hat:rhel_aus:8.2::appstream","package":"flac","fixed_in":["0:1.3.2-9.el8_2.1"],"sources":["osv"]},{"ecosystem":"Red Hat:rhel_aus:8.2::appstream","package":"flac-debuginfo","fixed_in":["0:1.3.2-9.el8_2.1"],"sources":["osv"]},{"ecosystem":"Red Hat:rhel_aus:8.2::appstream","package":"flac-debugsource","fixed_in":["0:1.3.2-9.el8_2.1"],"sources":["osv"]},{"ecosystem":"Red Hat:rhel_aus:8.2::appstream","package":"flac-libs","fixed_in":["0:1.3.2-9.el8_2.1"],"sources":["osv"]},{"ecosystem":"Red Hat:rhel_aus:8.2::appstream","package":"flac-libs-debuginfo","fixed_in":["0:1.3.2-9.el8_2.1"],"sources":["osv"]},{"ecosystem":"Red Hat:rhel_e4s:8.2::appstream","package":"flac","fixed_in":["0:1.3.2-9.el8_2.1"],"sources":["osv"]},{"ecosystem":"Red Hat:rhel_e4s:8.2::appstream","package":"flac-debuginfo","fixed_in":["0:1.3.2-9.el8_2.1"],"sources":["osv"]},{"ecosystem":"Red Hat:rhel_e4s:8.2::appstream","package":"flac-debugsource","fixed_in":["0:1.3.2-9.el8_2.1"],"sources":["osv"]},{"ecosystem":"Red Hat:rhel_e4s:8.2::appstream","package":"flac-libs","fixed_in":["0:1.3.2-9.el8_2.1"],"sources":["osv"]},{"ecosystem":"Red Hat:rhel_e4s:8.2::appstream","package":"flac-libs-debuginfo","fixed_in":["0:1.3.2-9.el8_2.1"],"sources":["osv"]},{"ecosystem":"Red Hat:rhel_tus:8.2::appstream","package":"flac","fixed_in":["0:1.3.2-9.el8_2.1"],"sources":["osv"]},{"ecosystem":"Red Hat:rhel_tus:8.2::appstream","package":"flac-debuginfo","fixed_in":["0:1.3.2-9.el8_2.1"],"sources":["osv"]},{"ecosystem":"Red Hat:rhel_tus:8.2::appstream","package":"flac-debugsource","fixed_in":["0:1.3.2-9.el8_2.1"],"sources":["osv"]},{"ecosystem":"Red Hat:rhel_tus:8.2::appstream","package":"flac-libs","fixed_in":["0:1.3.2-9.el8_2.1"],"sources":["osv"]},{"ecosystem":"Red Hat:rhel_tus:8.2::appstream","package":"flac-libs-debuginfo","fixed_in":["0:1.3.2-9.el8_2.1"],"sources":["osv"]},{"ecosystem":"Red Hat:rhel_aus:8.4::appstream","package":"flac","fixed_in":["0:1.3.2-9.el8_4.1"],"sources":["osv"]},{"ecosystem":"Red Hat:rhel_aus:8.4::appstream","package":"flac-debuginfo","fixed_in":["0:1.3.2-9.el8_4.1"],"sources":["osv"]},{"ecosystem":"Red Hat:rhel_aus:8.4::appstream","package":"flac-debugsource","fixed_in":["0:1.3.2-9.el8_4.1"],"sources":["osv"]},{"ecosystem":"Red Hat:rhel_aus:8.4::appstream","package":"flac-libs","fixed_in":["0:1.3.2-9.el8_4.1"],"sources":["osv"]},{"ecosystem":"Red Hat:rhel_aus:8.4::appstream","package":"flac-libs-debuginfo","fixed_in":["0:1.3.2-9.el8_4.1"],"sources":["osv"]},{"ecosystem":"Red Hat:rhel_e4s:8.4::appstream","package":"flac","fixed_in":["0:1.3.2-9.el8_4.1"],"sources":["osv"]},{"ecosystem":"Red Hat:rhel_e4s:8.4::appstream","package":"flac-debuginfo","fixed_in":["0:1.3.2-9.el8_4.1"],"sources":["osv"]},{"ecosystem":"Red Hat:rhel_e4s:8.4::appstream","package":"flac-debugsource","fixed_in":["0:1.3.2-9.el8_4.1"],"sources":["osv"]},{"ecosystem":"Red Hat:rhel_e4s:8.4::appstream","package":"flac-libs","fixed_in":["0:1.3.2-9.el8_4.1"],"sources":["osv"]},{"ecosystem":"Red Hat:rhel_e4s:8.4::appstream","package":"flac-libs-debuginfo","fixed_in":["0:1.3.2-9.el8_4.1"],"sources":["osv"]},{"ecosystem":"Red Hat:rhel_tus:8.4::appstream","package":"flac","fixed_in":["0:1.3.2-9.el8_4.1"],"sources":["osv"]},{"ecosystem":"Red Hat:rhel_tus:8.4::appstream","package":"flac-debuginfo","fixed_in":["0:1.3.2-9.el8_4.1"],"sources":["osv"]},{"ecosystem":"Red Hat:rhel_tus:8.4::appstream","package":"flac-debugsource","fixed_in":["0:1.3.2-9.el8_4.1"],"sources":["osv"]},{"ecosystem":"Red Hat:rhel_tus:8.4::appstream","package":"flac-libs","fixed_in":["0:1.3.2-9.el8_4.1"],"sources":["osv"]},{"ecosystem":"Red Hat:rhel_tus:8.4::appstream","package":"flac-libs-debuginfo","fixed_in":["0:1.3.2-9.el8_4.1"],"sources":["osv"]},{"ecosystem":"Red Hat:rhel_eus:8.6::appstream","package":"flac","fixed_in":["0:1.3.2-9.el8_6.1"],"sources":["osv"]},{"ecosystem":"Red Hat:rhel_eus:8.6::appstream","package":"flac-debuginfo","fixed_in":["0:1.3.2-9.el8_6.1"],"sources":["osv"]},{"ecosystem":"Red Hat:rhel_eus:8.6::appstream","package":"flac-debugsource","fixed_in":["0:1.3.2-9.el8_6.1"],"sources":["osv"]},{"ecosystem":"Red Hat:rhel_eus:8.6::appstream","package":"flac-libs","fixed_in":["0:1.3.2-9.el8_6.1"],"sources":["osv"]},{"ecosystem":"Red Hat:rhel_eus:8.6::appstream","package":"flac-libs-debuginfo","fixed_in":["0:1.3.2-9.el8_6.1"],"sources":["osv"]},{"ecosystem":"Red Hat:rhel_eus:8.6::crb","package":"flac","fixed_in":["0:1.3.2-9.el8_6.1"],"sources":["osv"]},{"ecosystem":"Red Hat:rhel_eus:8.6::crb","package":"flac-debuginfo","fixed_in":["0:1.3.2-9.el8_6.1"],"sources":["osv"]},{"ecosystem":"Red Hat:rhel_eus:8.6::crb","package":"flac-debugsource","fixed_in":["0:1.3.2-9.el8_6.1"],"sources":["osv"]},{"ecosystem":"Red Hat:rhel_eus:8.6::crb","package":"flac-devel","fixed_in":["0:1.3.2-9.el8_6.1"],"sources":["osv"]},{"ecosystem":"Red Hat:rhel_eus:8.6::crb","package":"flac-libs-debuginfo","fixed_in":["0:1.3.2-9.el8_6.1"],"sources":["osv"]},{"ecosystem":"Red Hat:enterprise_linux:8::appstream","package":"flac","fixed_in":["0:1.3.2-9.el8_8.1"],"sources":["osv"]},{"ecosystem":"Red Hat:enterprise_linux:8::appstream","package":"flac-debuginfo","fixed_in":["0:1.3.2-9.el8_8.1"],"sources":["osv"]},{"ecosystem":"Red Hat:enterprise_linux:8::appstream","package":"flac-debugsource","fixed_in":["0:1.3.2-9.el8_8.1"],"sources":["osv"]},{"ecosystem":"Red Hat:enterprise_linux:8::appstream","package":"flac-libs","fixed_in":["0:1.3.2-9.el8_8.1"],"sources":["osv"]},{"ecosystem":"Red Hat:enterprise_linux:8::appstream","package":"flac-libs-debuginfo","fixed_in":["0:1.3.2-9.el8_8.1"],"sources":["osv"]},{"ecosystem":"Red Hat:enterprise_linux:8::crb","package":"flac","fixed_in":["0:1.3.2-9.el8_8.1"],"sources":["osv"]},{"ecosystem":"Red Hat:enterprise_linux:8::crb","package":"flac-debuginfo","fixed_in":["0:1.3.2-9.el8_8.1"],"sources":["osv"]},{"ecosystem":"Red Hat:enterprise_linux:8::crb","package":"flac-debugsource","fixed_in":["0:1.3.2-9.el8_8.1"],"sources":["osv"]},{"ecosystem":"Red Hat:enterprise_linux:8::crb","package":"flac-devel","fixed_in":["0:1.3.2-9.el8_8.1"],"sources":["osv"]},{"ecosystem":"Red Hat:enterprise_linux:8::crb","package":"flac-libs-debuginfo","fixed_in":["0:1.3.2-9.el8_8.1"],"sources":["osv"]},{"ecosystem":"Red Hat:rhel_eus:9.0::appstream","package":"flac","fixed_in":["0:1.3.3-9.el9_0.1"],"sources":["osv"]},{"ecosystem":"Red Hat:rhel_eus:9.0::appstream","package":"flac-debuginfo","fixed_in":["0:1.3.3-9.el9_0.1"],"sources":["osv"]},{"ecosystem":"Red Hat:rhel_eus:9.0::appstream","package":"flac-debugsource","fixed_in":["0:1.3.3-9.el9_0.1"],"sources":["osv"]},{"ecosystem":"Red Hat:rhel_eus:9.0::appstream","package":"flac-libs","fixed_in":["0:1.3.3-9.el9_0.1"],"sources":["osv"]},{"ecosystem":"Red Hat:rhel_eus:9.0::appstream","package":"flac-libs-debuginfo","fixed_in":["0:1.3.3-9.el9_0.1"],"sources":["osv"]},{"ecosystem":"Red Hat:rhel_eus:9.0::crb","package":"flac","fixed_in":["0:1.3.3-9.el9_0.1"],"sources":["osv"]},{"ecosystem":"Red Hat:rhel_eus:9.0::crb","package":"flac-debuginfo","fixed_in":["0:1.3.3-9.el9_0.1"],"sources":["osv"]},{"ecosystem":"Red Hat:rhel_eus:9.0::crb","package":"flac-debugsource","fixed_in":["0:1.3.3-9.el9_0.1"],"sources":["osv"]},{"ecosystem":"Red Hat:rhel_eus:9.0::crb","package":"flac-devel","fixed_in":["0:1.3.3-9.el9_0.1"],"sources":["osv"]},{"ecosystem":"Red Hat:rhel_eus:9.0::crb","package":"flac-libs-debuginfo","fixed_in":["0:1.3.3-9.el9_0.1"],"sources":["osv"]},{"ecosystem":"Red Hat:enterprise_linux:9::appstream","package":"flac","fixed_in":["0:1.3.3-10.el9_2.1"],"sources":["osv"]},{"ecosystem":"Red Hat:enterprise_linux:9::appstream","package":"flac-debuginfo","fixed_in":["0:1.3.3-10.el9_2.1"],"sources":["osv"]},{"ecosystem":"Red Hat:enterprise_linux:9::appstream","package":"flac-debugsource","fixed_in":["0:1.3.3-10.el9_2.1"],"sources":["osv"]},{"ecosystem":"Red Hat:enterprise_linux:9::appstream","package":"flac-libs","fixed_in":["0:1.3.3-10.el9_2.1"],"sources":["osv"]},{"ecosystem":"Red Hat:enterprise_linux:9::appstream","package":"flac-libs-debuginfo","fixed_in":["0:1.3.3-10.el9_2.1"],"sources":["osv"]},{"ecosystem":"Red Hat:enterprise_linux:9::crb","package":"flac","fixed_in":["0:1.3.3-10.el9_2.1"],"sources":["osv"]},{"ecosystem":"Red Hat:enterprise_linux:9::crb","package":"flac-debuginfo","fixed_in":["0:1.3.3-10.el9_2.1"],"sources":["osv"]},{"ecosystem":"Red Hat:enterprise_linux:9::crb","package":"flac-debugsource","fixed_in":["0:1.3.3-10.el9_2.1"],"sources":["osv"]},{"ecosystem":"Red Hat:enterprise_linux:9::crb","package":"flac-devel","fixed_in":["0:1.3.3-10.el9_2.1"],"sources":["osv"]},{"ecosystem":"Red Hat:enterprise_linux:9::crb","package":"flac-libs-debuginfo","fixed_in":["0:1.3.3-10.el9_2.1"],"sources":["osv"]},{"ecosystem":"Rocky Linux:9","package":"flac","fixed_in":["0:1.3.3-10.el9_2.1"],"sources":["osv"]},{"ecosystem":"SUSE:Linux Enterprise Module for Basesystem 15 SP4","package":"flac","fixed_in":["1.3.2-150000.3.14.1"],"sources":["osv"]},{"ecosystem":"SUSE:Linux Enterprise Module for Basesystem 15 SP5","package":"flac","fixed_in":["1.3.2-150000.3.14.1"],"sources":["osv"]},{"ecosystem":"SUSE:Linux Enterprise Module for Package Hub 15 SP4","package":"flac","fixed_in":["1.3.2-150000.3.14.1"],"sources":["osv"]},{"ecosystem":"SUSE:Linux Enterprise Module for Package Hub 15 SP5","package":"flac","fixed_in":["1.3.2-150000.3.14.1"],"sources":["osv"]},{"ecosystem":"SUSE:Manager Proxy 4.2","package":"flac","fixed_in":["1.3.2-150000.3.14.1"],"sources":["osv"]},{"ecosystem":"SUSE:Manager Server 4.2","package":"flac","fixed_in":["1.3.2-150000.3.14.1"],"sources":["osv"]},{"ecosystem":"openSUSE:Leap 15.4","package":"flac","fixed_in":["1.3.2-150000.3.14.1"],"sources":["osv"]},{"ecosystem":"openSUSE:Leap 15.5","package":"flac","fixed_in":["1.3.2-150000.3.14.1"],"sources":["osv"]},{"ecosystem":"Ubuntu:Pro:14.04:LTS","package":"flac","fixed_in":["1.3.0-2ubuntu0.14.04.1+esm2"],"sources":["osv"]},{"ecosystem":"Ubuntu:Pro:16.04:LTS","package":"flac","fixed_in":["1.3.1-4ubuntu0.1~esm2"],"sources":["osv"]},{"ecosystem":"Ubuntu:Pro:18.04:LTS","package":"flac","fixed_in":["1.3.2-1ubuntu0.1+esm1"],"sources":["osv"]},{"ecosystem":"Ubuntu:20.04:LTS","package":"flac","fixed_in":["1.3.3-1ubuntu0.2"],"sources":["osv"]},{"ecosystem":"Ubuntu:22.04:LTS","package":"flac","fixed_in":["1.3.3-2ubuntu0.2"],"sources":["osv"]}],"affected":[{"source":"osv","ecosystem":"AlmaLinux:8","package":"flac","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.3.2-9.el8_8.1"}]}]},{"source":"osv","ecosystem":"AlmaLinux:8","package":"flac-devel","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.3.2-9.el8_8.1"}]}]},{"source":"osv","ecosystem":"AlmaLinux:8","package":"flac-libs","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.3.2-9.el8_8.1"}]}]},{"source":"osv","ecosystem":"AlmaLinux:9","package":"flac","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.3.3-10.el9_2.1"}]}]},{"source":"osv","ecosystem":"AlmaLinux:9","package":"flac-devel","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.3.3-10.el9_2.1"}]}]},{"source":"osv","ecosystem":"AlmaLinux:9","package":"flac-libs","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.3.3-10.el9_2.1"}]}]},{"source":"osv","ecosystem":"Azure Linux:2","package":"flac","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.4.3-1"}]}]},{"source":"osv","ecosystem":"TuxCare:Ubuntu:18.04","package":"flac","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.3.2-1ubuntu0.1+tuxcare.els1"}]}]},{"source":"osv","ecosystem":"TuxCare:Ubuntu:18.04","package":"libflac++-dev","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.3.2-1ubuntu0.1+tuxcare.els1"}]}]},{"source":"osv","ecosystem":"TuxCare:Ubuntu:18.04","package":"libflac++6v5","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.3.2-1ubuntu0.1+tuxcare.els1"}]}]},{"source":"osv","ecosystem":"TuxCare:Ubuntu:18.04","package":"libflac-dev","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.3.2-1ubuntu0.1+tuxcare.els1"}]}]},{"source":"osv","ecosystem":"TuxCare:Ubuntu:18.04","package":"libflac-doc","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.3.2-1ubuntu0.1+tuxcare.els1"}]}]},{"source":"osv","ecosystem":"TuxCare:Ubuntu:18.04","package":"libflac8","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.3.2-1ubuntu0.1+tuxcare.els1"}]}]},{"source":"osv","ecosystem":"Debian:12","package":"flac","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.4.1-1"}]}]},{"source":"osv","ecosystem":"Debian:13","package":"flac","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.4.1-1"}]}]},{"source":"osv","ecosystem":"Debian:14","package":"flac","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.4.1-1"}]}]},{"source":"osv","ecosystem":"Debian:10","package":"flac","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.3.2-3+deb10u3"}]}],"versions":["1.3.2-3","1.3.2-3+deb10u1","1.3.2-3+deb10u2"]},{"source":"osv","ecosystem":"Debian:11","package":"flac","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.3.3-2+deb11u2"}]}],"versions":["1.3.3-2","1.3.3-2+deb11u1"]},{"source":"osv","ecosystem":"Julia","package":"FLAC_jll","ranges":[{"type":"SEMVER","events":[{"introduced":"0"},{"fixed":"1.4.2+0"}]}]},{"source":"osv","ecosystem":"Mageia:8","package":"flac","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.3.3-3.2.mga8"}]}]},{"source":"osv","ecosystem":"openEuler:20.03-LTS-SP1","package":"flac","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.3.3-7.oe1"}]}]},{"source":"osv","ecosystem":"openEuler:20.03-LTS-SP3","package":"flac","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.3.3-7.oe1"}]}]},{"source":"osv","ecosystem":"openEuler:22.03-LTS","package":"flac","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.3.4-2.oe2203sp2"}]}]},{"source":"osv","ecosystem":"openEuler:22.03-LTS-SP1","package":"flac","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.3.4-2.oe2203sp1"}]}]},{"source":"osv","ecosystem":"openEuler:22.03-LTS-SP2","package":"flac","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.3.4-2.oe2203sp2"}]}]},{"source":"osv","ecosystem":"Red Hat:rhel_e4s:8.1::appstream","package":"flac","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.3.2-9.el8_1.1"}]}]},{"source":"osv","ecosystem":"Red Hat:rhel_e4s:8.1::appstream","package":"flac-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.3.2-9.el8_1.1"}]}]},{"source":"osv","ecosystem":"Red Hat:rhel_e4s:8.1::appstream","package":"flac-debugsource","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.3.2-9.el8_1.1"}]}]},{"source":"osv","ecosystem":"Red Hat:rhel_e4s:8.1::appstream","package":"flac-libs","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.3.2-9.el8_1.1"}]}]},{"source":"osv","ecosystem":"Red Hat:rhel_e4s:8.1::appstream","package":"flac-libs-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.3.2-9.el8_1.1"}]}]},{"source":"osv","ecosystem":"Red Hat:rhel_aus:8.2::appstream","package":"flac","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.3.2-9.el8_2.1"}]}]},{"source":"osv","ecosystem":"Red Hat:rhel_aus:8.2::appstream","package":"flac-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.3.2-9.el8_2.1"}]}]},{"source":"osv","ecosystem":"Red Hat:rhel_aus:8.2::appstream","package":"flac-debugsource","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.3.2-9.el8_2.1"}]}]},{"source":"osv","ecosystem":"Red Hat:rhel_aus:8.2::appstream","package":"flac-libs","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.3.2-9.el8_2.1"}]}]},{"source":"osv","ecosystem":"Red Hat:rhel_aus:8.2::appstream","package":"flac-libs-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.3.2-9.el8_2.1"}]}]},{"source":"osv","ecosystem":"Red Hat:rhel_e4s:8.2::appstream","package":"flac","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.3.2-9.el8_2.1"}]}]},{"source":"osv","ecosystem":"Red Hat:rhel_e4s:8.2::appstream","package":"flac-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.3.2-9.el8_2.1"}]}]},{"source":"osv","ecosystem":"Red Hat:rhel_e4s:8.2::appstream","package":"flac-debugsource","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.3.2-9.el8_2.1"}]}]},{"source":"osv","ecosystem":"Red Hat:rhel_e4s:8.2::appstream","package":"flac-libs","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.3.2-9.el8_2.1"}]}]},{"source":"osv","ecosystem":"Red Hat:rhel_e4s:8.2::appstream","package":"flac-libs-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.3.2-9.el8_2.1"}]}]},{"source":"osv","ecosystem":"Red Hat:rhel_tus:8.2::appstream","package":"flac","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.3.2-9.el8_2.1"}]}]},{"source":"osv","ecosystem":"Red Hat:rhel_tus:8.2::appstream","package":"flac-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.3.2-9.el8_2.1"}]}]},{"source":"osv","ecosystem":"Red Hat:rhel_tus:8.2::appstream","package":"flac-debugsource","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.3.2-9.el8_2.1"}]}]},{"source":"osv","ecosystem":"Red Hat:rhel_tus:8.2::appstream","package":"flac-libs","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.3.2-9.el8_2.1"}]}]},{"source":"osv","ecosystem":"Red Hat:rhel_tus:8.2::appstream","package":"flac-libs-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.3.2-9.el8_2.1"}]}]},{"source":"osv","ecosystem":"Red Hat:rhel_aus:8.4::appstream","package":"flac","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.3.2-9.el8_4.1"}]}]},{"source":"osv","ecosystem":"Red Hat:rhel_aus:8.4::appstream","package":"flac-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.3.2-9.el8_4.1"}]}]},{"source":"osv","ecosystem":"Red Hat:rhel_aus:8.4::appstream","package":"flac-debugsource","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.3.2-9.el8_4.1"}]}]},{"source":"osv","ecosystem":"Red Hat:rhel_aus:8.4::appstream","package":"flac-libs","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.3.2-9.el8_4.1"}]}]},{"source":"osv","ecosystem":"Red Hat:rhel_aus:8.4::appstream","package":"flac-libs-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.3.2-9.el8_4.1"}]}]},{"source":"osv","ecosystem":"Red Hat:rhel_e4s:8.4::appstream","package":"flac","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.3.2-9.el8_4.1"}]}]},{"source":"osv","ecosystem":"Red Hat:rhel_e4s:8.4::appstream","package":"flac-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.3.2-9.el8_4.1"}]}]},{"source":"osv","ecosystem":"Red Hat:rhel_e4s:8.4::appstream","package":"flac-debugsource","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.3.2-9.el8_4.1"}]}]},{"source":"osv","ecosystem":"Red Hat:rhel_e4s:8.4::appstream","package":"flac-libs","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.3.2-9.el8_4.1"}]}]},{"source":"osv","ecosystem":"Red Hat:rhel_e4s:8.4::appstream","package":"flac-libs-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.3.2-9.el8_4.1"}]}]},{"source":"osv","ecosystem":"Red Hat:rhel_tus:8.4::appstream","package":"flac","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.3.2-9.el8_4.1"}]}]},{"source":"osv","ecosystem":"Red Hat:rhel_tus:8.4::appstream","package":"flac-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.3.2-9.el8_4.1"}]}]},{"source":"osv","ecosystem":"Red Hat:rhel_tus:8.4::appstream","package":"flac-debugsource","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.3.2-9.el8_4.1"}]}]},{"source":"osv","ecosystem":"Red Hat:rhel_tus:8.4::appstream","package":"flac-libs","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.3.2-9.el8_4.1"}]}]},{"source":"osv","ecosystem":"Red Hat:rhel_tus:8.4::appstream","package":"flac-libs-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.3.2-9.el8_4.1"}]}]},{"source":"osv","ecosystem":"Red Hat:rhel_eus:8.6::appstream","package":"flac","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.3.2-9.el8_6.1"}]}]},{"source":"osv","ecosystem":"Red Hat:rhel_eus:8.6::appstream","package":"flac-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.3.2-9.el8_6.1"}]}]},{"source":"osv","ecosystem":"Red Hat:rhel_eus:8.6::appstream","package":"flac-debugsource","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.3.2-9.el8_6.1"}]}]},{"source":"osv","ecosystem":"Red Hat:rhel_eus:8.6::appstream","package":"flac-libs","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.3.2-9.el8_6.1"}]}]},{"source":"osv","ecosystem":"Red Hat:rhel_eus:8.6::appstream","package":"flac-libs-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.3.2-9.el8_6.1"}]}]},{"source":"osv","ecosystem":"Red Hat:rhel_eus:8.6::crb","package":"flac","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.3.2-9.el8_6.1"}]}]},{"source":"osv","ecosystem":"Red Hat:rhel_eus:8.6::crb","package":"flac-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.3.2-9.el8_6.1"}]}]},{"source":"osv","ecosystem":"Red Hat:rhel_eus:8.6::crb","package":"flac-debugsource","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.3.2-9.el8_6.1"}]}]},{"source":"osv","ecosystem":"Red Hat:rhel_eus:8.6::crb","package":"flac-devel","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.3.2-9.el8_6.1"}]}]},{"source":"osv","ecosystem":"Red Hat:rhel_eus:8.6::crb","package":"flac-libs-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.3.2-9.el8_6.1"}]}]},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:8::appstream","package":"flac","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.3.2-9.el8_8.1"}]}]},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:8::appstream","package":"flac-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.3.2-9.el8_8.1"}]}]},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:8::appstream","package":"flac-debugsource","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.3.2-9.el8_8.1"}]}]},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:8::appstream","package":"flac-libs","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.3.2-9.el8_8.1"}]}]},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:8::appstream","package":"flac-libs-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.3.2-9.el8_8.1"}]}]},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:8::crb","package":"flac","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.3.2-9.el8_8.1"}]}]},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:8::crb","package":"flac-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.3.2-9.el8_8.1"}]}]},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:8::crb","package":"flac-debugsource","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.3.2-9.el8_8.1"}]}]},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:8::crb","package":"flac-devel","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.3.2-9.el8_8.1"}]}]},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:8::crb","package":"flac-libs-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.3.2-9.el8_8.1"}]}]},{"source":"osv","ecosystem":"Red Hat:rhel_eus:9.0::appstream","package":"flac","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.3.3-9.el9_0.1"}]}]},{"source":"osv","ecosystem":"Red Hat:rhel_eus:9.0::appstream","package":"flac-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.3.3-9.el9_0.1"}]}]},{"source":"osv","ecosystem":"Red Hat:rhel_eus:9.0::appstream","package":"flac-debugsource","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.3.3-9.el9_0.1"}]}]},{"source":"osv","ecosystem":"Red Hat:rhel_eus:9.0::appstream","package":"flac-libs","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.3.3-9.el9_0.1"}]}]},{"source":"osv","ecosystem":"Red Hat:rhel_eus:9.0::appstream","package":"flac-libs-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.3.3-9.el9_0.1"}]}]},{"source":"osv","ecosystem":"Red Hat:rhel_eus:9.0::crb","package":"flac","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.3.3-9.el9_0.1"}]}]},{"source":"osv","ecosystem":"Red Hat:rhel_eus:9.0::crb","package":"flac-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.3.3-9.el9_0.1"}]}]},{"source":"osv","ecosystem":"Red Hat:rhel_eus:9.0::crb","package":"flac-debugsource","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.3.3-9.el9_0.1"}]}]},{"source":"osv","ecosystem":"Red Hat:rhel_eus:9.0::crb","package":"flac-devel","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.3.3-9.el9_0.1"}]}]},{"source":"osv","ecosystem":"Red Hat:rhel_eus:9.0::crb","package":"flac-libs-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.3.3-9.el9_0.1"}]}]},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:9::appstream","package":"flac","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.3.3-10.el9_2.1"}]}]},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:9::appstream","package":"flac-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.3.3-10.el9_2.1"}]}]},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:9::appstream","package":"flac-debugsource","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.3.3-10.el9_2.1"}]}]},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:9::appstream","package":"flac-libs","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.3.3-10.el9_2.1"}]}]},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:9::appstream","package":"flac-libs-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.3.3-10.el9_2.1"}]}]},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:9::crb","package":"flac","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.3.3-10.el9_2.1"}]}]},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:9::crb","package":"flac-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.3.3-10.el9_2.1"}]}]},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:9::crb","package":"flac-debugsource","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.3.3-10.el9_2.1"}]}]},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:9::crb","package":"flac-devel","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.3.3-10.el9_2.1"}]}]},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:9::crb","package":"flac-libs-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.3.3-10.el9_2.1"}]}]},{"source":"osv","ecosystem":"Rocky Linux:9","package":"flac","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.3.3-10.el9_2.1"}]}]},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Module for Basesystem 15 SP4","package":"flac","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.3.2-150000.3.14.1"}]}]},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Module for Basesystem 15 SP5","package":"flac","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.3.2-150000.3.14.1"}]}]},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Module for Package Hub 15 SP4","package":"flac","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.3.2-150000.3.14.1"}]}]},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Module for Package Hub 15 SP5","package":"flac","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.3.2-150000.3.14.1"}]}]},{"source":"osv","ecosystem":"SUSE:Manager Proxy 4.2","package":"flac","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.3.2-150000.3.14.1"}]}]},{"source":"osv","ecosystem":"SUSE:Manager Server 4.2","package":"flac","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.3.2-150000.3.14.1"}]}]},{"source":"osv","ecosystem":"openSUSE:Leap 15.4","package":"flac","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.3.2-150000.3.14.1"}]}]},{"source":"osv","ecosystem":"openSUSE:Leap 15.5","package":"flac","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.3.2-150000.3.14.1"}]}]},{"source":"osv","ecosystem":"Ubuntu:Pro:14.04:LTS","package":"flac","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.3.0-2ubuntu0.14.04.1+esm2"}]}],"versions":["1.3.0-1","1.3.0-2","1.3.0-2ubuntu0.14.04.1","1.3.0-2ubuntu0.14.04.1+esm1"]},{"source":"osv","ecosystem":"Ubuntu:Pro:16.04:LTS","package":"flac","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.3.1-4ubuntu0.1~esm2"}]}],"versions":["1.3.1-4","1.3.1-4ubuntu0.1~esm1"]},{"source":"osv","ecosystem":"Ubuntu:Pro:18.04:LTS","package":"flac","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.3.2-1ubuntu0.1+esm1"}]}],"versions":["1.3.2-1","1.3.2-1ubuntu0.1"]},{"source":"osv","ecosystem":"Ubuntu:20.04:LTS","package":"flac","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.3.3-1ubuntu0.2"}]}],"versions":["1.3.3-1","1.3.3-1build1","1.3.3-1ubuntu0.1"]},{"source":"osv","ecosystem":"Ubuntu:22.04:LTS","package":"flac","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.3.3-2ubuntu0.2"}]}],"versions":["1.3.3-2","1.3.3-2build1","1.3.3-2build2","1.3.3-2ubuntu0.1"]},{"source":"osv","ecosystem":"Ubuntu:20.04:LTS","package":"flac","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.3.3-1ubuntu0.2"}]}],"versions":["1.3.3-1","1.3.3-1build1","1.3.3-1ubuntu0.1"]},{"source":"osv","ecosystem":"Ubuntu:22.04:LTS","package":"flac","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.3.3-2ubuntu0.2"}]}],"versions":["1.3.3-2","1.3.3-2build1","1.3.3-2build2","1.3.3-2ubuntu0.1"]},{"source":"osv","ecosystem":"Ubuntu:Pro:14.04:LTS","package":"flac","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.3.0-2ubuntu0.14.04.1+esm2"}]}],"versions":["1.3.0-1","1.3.0-2","1.3.0-2ubuntu0.14.04.1","1.3.0-2ubuntu0.14.04.1+esm1"]},{"source":"osv","ecosystem":"Ubuntu:Pro:16.04:LTS","package":"flac","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.3.1-4ubuntu0.1~esm2"}]}],"versions":["1.3.1-4","1.3.1-4ubuntu0.1~esm1"]},{"source":"osv","ecosystem":"Ubuntu:Pro:18.04:LTS","package":"flac","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.3.2-1ubuntu0.1+esm1"}]}],"versions":["1.3.2-1","1.3.2-1ubuntu0.1"]}],"products":[{"vendor":"flac_project","product":"flac"}],"references":[{"url":"https://github.com/xiph/flac/issues/215","tags":["x_transferred","Exploit","Issue Tracking","report","web","article"]},{"url":"https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/ZD2AJTU4PCJQP7HPTS2L2ELJWBASCRGD/","tags":["vendor-advisory","x_transferred","web"]},{"url":"https://www.debian.org/security/2023/dsa-5500","tags":["vendor-advisory","x_transferred","advisory","web"]},{"url":"https://lists.debian.org/debian-lts-announce/2023/09/msg00028.html","tags":["mailing-list","x_transferred","web"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2020-22219","tags":["web","advisory"]},{"url":"https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/ZD2AJTU4PCJQP7HPTS2L2ELJWBASCRGD"},{"url":"https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/ZD2AJTU4PCJQP7HPTS2L2ELJWBASCRGD"},{"url":"https://github.com/advisories/GHSA-hvp4-qmrj-gvhf"},{"url":"https://access.redhat.com/errata/RHSA-2023:5046","tags":["advisory"]},{"url":"https://access.redhat.com/security/cve/CVE-2020-22219","tags":["report"]},{"url":"https://bugzilla.redhat.com/2235489","tags":["report"]},{"url":"https://errata.almalinux.org/8/ALSA-2023-5046.html","tags":["advisory"]},{"url":"https://access.redhat.com/errata/RHSA-2023:5048","tags":["advisory"]},{"url":"https://errata.almalinux.org/9/ALSA-2023-5048.html","tags":["advisory"]},{"url":"https://errata.tuxcare.com/els_os/ubuntu18.04els/CLSA-2026-1788193482.html","tags":["advisory"]},{"url":"https://security-tracker.debian.org/tracker/CVE-2020-22219","tags":["advisory"]},{"url":"https://advisories.mageia.org/MGASA-2023-0277.html","tags":["advisory"]},{"url":"https://bugs.mageia.org/show_bug.cgi?id=32283","tags":["report"]},{"url":"https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2020-22219","tags":["advisory"]},{"url":"https://ubuntu.com/security/notices/USN-6360-1","tags":["advisory"]},{"url":"https://www.openeuler.org/en/security/safety-bulletin/detail.html?id=openEuler-SA-2023-1562","tags":["advisory"]},{"url":"https://access.redhat.com/errata/RHSA-2023:5042","tags":["advisory"]},{"url":"https://access.redhat.com/security/updates/classification/#important","tags":["article"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=2235489","tags":["report"]},{"url":"https://security.access.redhat.com/data/csaf/v2/advisories/2023/rhsa-2023_5042.json","tags":["advisory"]},{"url":"https://www.cve.org/CVERecord?id=CVE-2020-22219","tags":["advisory","report"]},{"url":"https://github.com/xiph/flac/pull/419","tags":["article"]},{"url":"https://access.redhat.com/errata/RHSA-2023:5043","tags":["advisory"]},{"url":"https://security.access.redhat.com/data/csaf/v2/advisories/2023/rhsa-2023_5043.json","tags":["advisory"]},{"url":"https://access.redhat.com/errata/RHSA-2023:5044","tags":["advisory"]},{"url":"https://security.access.redhat.com/data/csaf/v2/advisories/2023/rhsa-2023_5044.json","tags":["advisory"]},{"url":"https://access.redhat.com/errata/RHSA-2023:5045","tags":["advisory"]},{"url":"https://security.access.redhat.com/data/csaf/v2/advisories/2023/rhsa-2023_5045.json","tags":["advisory"]},{"url":"https://security.access.redhat.com/data/csaf/v2/advisories/2023/rhsa-2023_5046.json","tags":["advisory"]},{"url":"https://access.redhat.com/errata/RHSA-2023:5047","tags":["advisory"]},{"url":"https://security.access.redhat.com/data/csaf/v2/advisories/2023/rhsa-2023_5047.json","tags":["advisory"]},{"url":"https://security.access.redhat.com/data/csaf/v2/advisories/2023/rhsa-2023_5048.json","tags":["advisory"]},{"url":"https://errata.rockylinux.org/RLSA-2023:5048","tags":["advisory"]},{"url":"https://www.suse.com/support/update/announcement/2023/suse-su-20233635-1/","tags":["advisory"]},{"url":"https://bugzilla.suse.com/1214615","tags":["report"]},{"url":"https://www.suse.com/security/cve/CVE-2020-22219","tags":["web"]},{"url":"https://ubuntu.com/security/CVE-2020-22219","tags":["report"]},{"url":"https://ubuntu.com/security/notices/USN-6360-2","tags":["advisory"]}],"sources":{"cve":[{"id":"CVE-2020-22219","description":"Buffer Overflow vulnerability in function bitwriter_grow_ in flac before 1.4.0 allows remote attackers to run arbitrary code via crafted input to the encoder.","status":"published","published":"2023-08-22T00:00:00Z","modified":"2024-10-03T18:08:04.753Z","updated_at":"2026-11-02T14:35:46.873079Z"}],"euvd":[{"id":"EUVD-2020-14984","description":"Buffer Overflow vulnerability in function bitwriter_grow_ in flac before 1.4.0 allows remote attackers to run arbitrary code via crafted input to the encoder.","status":"published","published":"2023-08-22T00:00:00Z","modified":"2024-10-03T18:08:04Z","updated_at":"2026-11-03T00:27:53.790276Z"}],"ghsa":[{"id":"GHSA-hvp4-qmrj-gvhf","title":"Buffer Overflow vulnerability in function bitwriter_grow_ in flac before 1.4.0 allows remote...","description":"Buffer Overflow vulnerability in function bitwriter_grow_ in flac before 1.4.0 allows remote attackers to run arbitrary code via crafted input to the encoder.","status":"published","published":"2023-08-22T21:30:25Z","modified":"2024-04-04T07:06:12Z","cvss":[{"version":"3.1","score":9.8,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H","level":"critical"}],"cwes":["CWE-120"],"updated_at":"2026-11-02T14:56:48.229282Z"}],"nvd":[{"id":"CVE-2020-22219","description":"Buffer Overflow vulnerability in function bitwriter_grow_ in flac before 1.4.0 allows remote attackers to run arbitrary code via crafted input to the encoder.","status":"published","published":"2023-08-22T19:16:19.19Z","modified":"2026-06-17T03:04:11.727Z","cvss":[{"version":"3.1","score":7.8,"vector":"CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H","level":"high","assessor":"primary"}],"cwes":["CWE-120"],"updated_at":"2026-11-02T14:06:47.910346Z"}],"osv":[{"id":"AZL-28074","title":"CVE-2020-22219 affecting package flac for versions less than 1.4.3-1","description":"Buffer Overflow vulnerability in function bitwriter_grow_ in flac before 1.4.0 allows remote attackers to run arbitrary code via crafted input to the encoder.","status":"published","published":"2023-08-22T19:16:19Z","modified":"2026-04-21T04:25:49.568393Z","cvss":[{"version":"3.1","score":7.8,"vector":"CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H","level":"high"}],"updated_at":"2026-11-02T15:28:03.46006Z"},{"id":"CVE-2020-22219","description":"Buffer Overflow vulnerability in function bitwriter_grow_ in flac before 1.4.0 allows remote attackers to run arbitrary code via crafted input to the encoder.","status":"published","published":"2023-08-22T19:16:19.19Z","modified":"2026-10-20T13:52:15.159125749Z","cvss":[{"version":"3.1","score":7.8,"vector":"CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H","level":"high"}],"updated_at":"2026-11-02T15:44:15.534837Z"},{"id":"DEBIAN-CVE-2020-22219","description":"Buffer Overflow vulnerability in function bitwriter_grow_ in flac before 1.4.0 allows remote attackers to run arbitrary code via crafted input to the encoder.","status":"published","published":"2023-08-22T19:16:19.19Z","modified":"2026-10-26T12:02:39.614763314Z","cvss":[{"version":"3.1","score":7.8,"vector":"CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H","level":"high"}],"updated_at":"2026-11-02T15:45:33.729655Z"},{"id":"JLSEC-2026-21","title":"Buffer Overflow vulnerability in function `bitwriter_grow_` in flac before 1.4.0 allows remote...","description":"Buffer Overflow vulnerability in function `bitwriter_grow_` in flac before 1.4.0 allows remote attackers to run arbitrary code via crafted input to the encoder.","status":"published","published":"2026-04-01T18:37:49.977Z","modified":"2026-07-25T18:23:48.754848706Z","cvss":[{"version":"3.1","score":7.8,"vector":"CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H","level":"high"}],"updated_at":"2026-11-02T15:47:18.573531Z"},{"id":"OESA-2023-1562","title":"flac security update","description":"document files for flac\r\n\r\nSecurity Fix(es):\r\n\r\nBuffer Overflow vulnerability in function bitwriter_grow_ in flac before 1.4.0 allows remote attackers to run arbitrary code via crafted input to the encoder.(CVE-2020-22219)","status":"published","published":"2023-09-02T11:06:01Z","modified":"2026-08-18T01:17:52.400200433Z","cvss":[{"version":"3.1","score":9.8,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H","level":"critical"}],"updated_at":"2026-11-02T15:52:40.328856Z"},{"id":"RHSA-2023:5042","title":"Red Hat Security Advisory: flac security update","status":"published","published":"2024-09-16T12:56:56Z","modified":"2025-11-22T12:55:17Z","cvss":[{"version":"3.1","score":7.8,"vector":"CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H","level":"high"}],"updated_at":"2026-11-02T15:53:11.734882Z"},{"id":"RHSA-2023:5043","title":"Red Hat Security Advisory: flac security update","status":"published","published":"2024-09-16T12:57:07Z","modified":"2025-11-22T12:55:18Z","cvss":[{"version":"3.1","score":7.8,"vector":"CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H","level":"high"}],"updated_at":"2026-11-02T15:53:11.734882Z"},{"id":"RHSA-2023:5044","title":"Red Hat Security Advisory: flac security update","status":"published","published":"2024-09-16T12:57:57Z","modified":"2025-11-22T12:55:19Z","cvss":[{"version":"3.1","score":7.8,"vector":"CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H","level":"high"}],"updated_at":"2026-11-02T15:53:11.734882Z"},{"id":"RHSA-2023:5045","title":"Red Hat Security Advisory: flac security update","status":"published","published":"2024-09-16T12:57:38Z","modified":"2026-06-26T12:22:21.135675651Z","cvss":[{"version":"3.1","score":7.8,"vector":"CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H","level":"high"}],"updated_at":"2026-11-02T15:53:11.734882Z"},{"id":"RHSA-2023:5046","title":"Red Hat Security Advisory: flac security update","status":"published","published":"2024-09-16T12:57:47Z","modified":"2026-06-26T12:22:21.207333546Z","cvss":[{"version":"3.1","score":7.8,"vector":"CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H","level":"high"}],"updated_at":"2026-11-02T15:53:11.734882Z"},{"id":"RHSA-2023:5047","title":"Red Hat Security Advisory: flac security update","status":"published","published":"2024-09-16T12:57:28Z","modified":"2026-06-26T12:22:21.158633541Z","cvss":[{"version":"3.1","score":7.8,"vector":"CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H","level":"high"}],"updated_at":"2026-11-02T15:53:11.734882Z"},{"id":"RHSA-2023:5048","title":"Red Hat Security Advisory: flac security update","status":"published","published":"2024-09-16T12:57:18Z","modified":"2026-06-26T12:22:21.132214473Z","cvss":[{"version":"3.1","score":7.8,"vector":"CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H","level":"high"}],"updated_at":"2026-11-02T15:53:11.734882Z"},{"id":"RLSA-2023:5048","title":"Important: flac security update","description":"FLAC stands for Free Lossless Audio Codec. FLAC is similar to Ogg Vorbis, but lossless. The FLAC project consists of the stream format, reference encoders and decoders in library form, a command-line program to encode and decode FLAC files, and a command-line metadata editor for FLAC files.\n\nSecurity Fix(es):\n\n* flac: Remote Code Execution (RCE) via the bitwriter_grow_ function, by supplying crafted input to the encoder (CVE-2020-22219)\n\nFor more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.","status":"published","published":"2026-06-25T12:03:37.665962Z","modified":"2026-06-25T12:30:05.598514908Z","cvss":[{"version":"3.1","score":7.8,"vector":"CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H","level":"high"}],"updated_at":"2026-11-02T15:53:24.63379Z"},{"id":"UBUNTU-CVE-2020-22219","description":"Buffer Overflow vulnerability in function bitwriter_grow_ in flac before 1.4.0 allows remote attackers to run arbitrary code via crafted input to the encoder.","status":"published","published":"2023-08-22T19:16:00Z","modified":"2026-04-22T12:33:39.735019Z","cvss":[{"version":"3.1","score":7.8,"vector":"CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H","level":"high"}],"updated_at":"2026-11-02T15:54:23.905183Z"},{"id":"ALSA-2023:5046","title":"Important: flac security update","description":"FLAC stands for Free Lossless Audio Codec. FLAC is similar to Ogg Vorbis, but lossless. The FLAC project consists of the stream format, reference encoders and decoders in library form, a command-line program to encode and decode FLAC files, and a command-line metadata editor for FLAC files.\n\nSecurity Fix(es):\n\n* flac: Remote Code Execution (RCE) via the bitwriter_grow_ function, by supplying crafted input to the encoder (CVE-2020-22219)\n\nFor more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.","status":"published","published":"2023-09-11T00:00:00Z","modified":"2026-10-29T11:02:19.270607106Z","updated_at":"2026-11-02T15:27:52.091404Z"},{"id":"ALSA-2023:5048","title":"Important: flac security update","description":"FLAC stands for Free Lossless Audio Codec. FLAC is similar to Ogg Vorbis, but lossless. The FLAC project consists of the stream format, reference encoders and decoders in library form, a command-line program to encode and decode FLAC files, and a command-line metadata editor for FLAC files.\n\nSecurity Fix(es):\n\n* flac: Remote Code Execution (RCE) via the bitwriter_grow_ function, by supplying crafted input to the encoder (CVE-2020-22219)\n\nFor more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.","status":"published","published":"2023-09-11T00:00:00Z","modified":"2026-10-29T11:31:30.333033316Z","updated_at":"2026-11-02T15:27:52.091404Z"},{"id":"CLSA-2026-1788193482","title":"Fix CVE(s): CVE-2020-22219","description":"   * SECURITY UPDATE: double free when growing the bit writer fails\n     - debian/patches/CVE-2020-22219.patch: add _nofree variants of the\n       safe_realloc helpers and use them where the caller keeps its own\n       pointer on failure, so bitwriter_grow_() no longer leaves a freed\n       bw-\u003ebuffer for FLAC__bitwriter_free() to release again\n       (upstream 21fe95ee82).\n     - CVE-2020-22219","status":"published","published":"2026-08-31T16:24:58Z","modified":"2026-10-26T09:32:04.184638273Z","updated_at":"2026-11-02T15:43:47.591214Z"},{"id":"DLA-3581-1","title":"flac - security update","status":"published","published":"2023-09-25T00:00:00Z","modified":"2026-03-09T01:23:12.840279Z","updated_at":"2026-11-02T15:46:11.734021Z"},{"id":"DSA-5500-1","title":"flac - security update","status":"published","published":"2023-09-18T00:00:00Z","modified":"2026-03-09T02:10:32.08366Z","updated_at":"2026-11-02T15:46:17.892347Z"},{"id":"MGASA-2023-0277","title":"Updated flac packages fix security vulnerability","description":"The updated packages fix a security vulnerability:\nBuffer Overflow vulnerability in function bitwriter_grow_ in flac before\n1.4.0 allows remote attackers to run arbitrary code via crafted input to\nthe encoder. (CVE-2020-22219)\n","status":"published","published":"2023-09-30T19:15:40Z","modified":"2026-04-16T04:41:00.987261274Z","updated_at":"2026-11-02T15:49:42.263076Z"},{"id":"SUSE-SU-2023:3635-1","title":"Security update for flac","description":"This update for flac fixes the following issues:\n\n- CVE-2020-22219: Fixed a buffer overflow in function bitwriter_grow_ which might allow a remote attacker to run arbitrary code via crafted input to the encoder. (bsc#1214615)\n","status":"published","published":"2023-09-18T10:54:55Z","modified":"2026-02-04T03:57:56.237867Z","updated_at":"2026-11-02T15:53:53.440387Z"},{"id":"USN-6360-1","title":"flac vulnerability","description":"It was discovered that FLAC incorrectly handled encoding certain files. A\nremote attacker could use this issue to cause FLAC to crash, resulting in a\ndenial of service, or possibly execute arbitrary code.\n","status":"published","published":"2023-09-12T16:36:18Z","modified":"2026-04-22T10:38:58.444402Z","updated_at":"2026-11-02T16:58:17.305935Z"},{"id":"USN-6360-2","title":"flac vulnerability","description":"USN-6360-1 fixed a vulnerability in FLAC. This update provides the\ncorresponding update for Ubuntu 14.04 LTS, Ubuntu 16.04 LTS, and\nUbuntu 18.04 LTS.\n\nOriginal advisory details:\n\n It was discovered that FLAC incorrectly handled encoding certain files. A\n remote attacker could use this issue to cause FLAC to crash, resulting in a\n denial of service, or possibly execute arbitrary code.\n","status":"published","published":"2023-09-22T00:31:34Z","modified":"2026-06-29T13:50:57.404091443Z","updated_at":"2026-11-02T16:58:17.305935Z"}]}}