CVE-2022-33064
An off-by-one error in function wav_read_header in src/wav.c in Libsndfile 1.1.0, results in a write out of bound, which allows an attacker to execute...
原文の説明
取得元が公開している説明をそのまま載せています (多くは英語)。
An off-by-one error in function wav_read_header in src/wav.c in Libsndfile 1.1.0, results in a write out of bound, which allows an attacker to execute arbitrary code, Denial of Service or other unspecified impacts.
参照URL
- advisory github.com
- advisory nvd.nist.gov
- report github.com