Known vulnerabilities in libsndfile

Vendor: Erik de Castro Lopo
Software: libsndfile
Software CPE: cpe:2.3:a:erik_de_castro_lopo:libsndfile:*:*:*:*:*:*:*:*
Website:
Total vulnerabilities: 31
Public exploits: 1
Known exploited (KEV): 0
Highest CVSSv4 Score: 9.3

Breakdown by Severity Chart

Severity distribution of vulnerabilities affecting libsndfile libsndfile is affected by 31 known vulnerabilities: 12 high, 6 medium, 13 low Critical High Medium Low

Vulnerabilities (31)

Vulnerability CWE-ID CSH Severity Public Exploit KEV First fixed release Published Bulletins
#VU100774 - Out-of-bounds read
CVE-2024-50612		 CWE-125 Medium
No
No
 - 21.11.2024 SB2024112116
SB2024112134
SB2024112135
and 16 more
#VU82946 - Integer overflow
CVE-2022-33065		 CWE-190 High
No
No
 - 09.11.2023 SB2023110948
SB2023110949
SB2023110951
and 8 more
#VU63043 - Out-of-bounds read
CVE-2021-4156		 CWE-125 Medium
No
No
 1.1.0 11.05.2022 SB2022032803
SB2022051131
SB2022051158
and 11 more
#VU61648 - Use of Uninitialized Variable
 CWE-457 Medium
No
No
 1.1.0 28.03.2022 SB2022032803
#VU61647 - Heap-based Buffer Overflow
 CWE-122 High
No
No
 1.1.0 28.03.2022 SB2022032803
#VU61646 - Heap-based Buffer Overflow
 CWE-122 High
No
No
 1.1.0 28.03.2022 SB2022032803
#VU61645 - Memory corruption
 CWE-119 High
No
No
 1.1.0 28.03.2022 SB2022032803
#VU61644 - Heap-based Buffer Overflow
 CWE-122 High
No
No
 1.1.0 28.03.2022 SB2022032803
#VU61643 - Heap-based Buffer Overflow
 CWE-122 High
No
No
 1.1.0 28.03.2022 SB2022032803
#VU61642 - Integer overflow
 CWE-190 High
No
No
 1.1.0 28.03.2022 SB2022032803
#VU61641 - Integer overflow
 CWE-190 High
No
No
 1.1.0 28.03.2022 SB2022032803
#VU61640 - Integer overflow
 CWE-190 High
No
No
 1.1.0 28.03.2022 SB2022032803
#VU61639 - Loop with Unreachable Exit Condition ('Infinite Loop')
 CWE-835 Medium
No
No
 1.1.0 28.03.2022 SB2022032803
#VU61638 - Stack-based buffer overflow
 CWE-121 High
No
No
 1.1.0 28.03.2022 SB2022032803
#VU61637 - Missing release of memory after effective lifetime
 CWE-401 Medium
No
No
 1.1.0 28.03.2022 SB2022032803
#VU55455 - Heap-based Buffer Overflow
CVE-2021-3246		 CWE-122 High
No
No
 1.1.0 01.08.2021 SB2021080101
SB2021080103
SB2021080602
and 15 more
#VU16178 - Missing release of memory after effective lifetime
CVE-2018-13419		 CWE-401 Low
No
No
 - 29.11.2018 SB2018112313
#VU16177 - Out-of-bounds read
CVE-2018-19662		 CWE-125 Low
No
No
 - 29.11.2018 SB2018112313
SB2019061303
SB2020042846
and 3 more
#VU16176 - Out-of-bounds read
CVE-2018-19661		 CWE-125 Low
No
No
 - 29.11.2018 SB2018112313
SB2019061303
SB2018123015
and 1 more
#VU16040 - NULL Pointer Dereference
CVE-2018-19432		 CWE-476 Low
No
No
 - 22.11.2018 SB2018112313
SB2019061303
SB2021080602
and 2 more


Showing elements 1 - 20 out of 31