This page tracks the Debian fix status. The vulnerability itself is described on the main CVE page. View CVE-2019-13147 →

DEBIAN-CVE-2019-13147

In Audio File Library (aka audiofile) 0.3.6, there exists one NULL pointer dereference bug in ulaw2linear_buf in G711.cpp in libmodules.a that allows...

Original description

The description as published by the source.

In Audio File Library (aka audiofile) 0.3.6, there exists one NULL pointer dereference bug in ulaw2linear_buf in G711.cpp in libmodules.a that allows an attacker to cause a denial of service via a crafted file.

Source: OSV.dev (Open Source Vulnerabilities) OSV

Affected packages

Debian:12 audiofile

[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0.3.6-5+deb12u1"}]}]

Debian:13 audiofile

[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0.3.6-6"}]}]

Debian:14 audiofile

[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0.3.6-6"}]}]

References

advisory security-tracker.debian.org