AZL-44397
See a problem?- Import Source
- https://github.com/microsoft/AzureLinuxVulnerabilityData/blob/main/osv/AZL-44397.json
- JSON Data
- https://api.test.osv.dev/v1/vulns/AZL-44397
- Upstream
- Published
- 2018-07-08T16:29:00Z
- Modified
- 2026-04-01T05:15:36.441963Z
- Severity
-
- 6.5 (Medium) CVSS_V3 - CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H CVSS Calculator
- Summary
- CVE-2018-13440 affecting package audiofile 0.3.6-27
- Details
-
The audiofile Audio File Library 0.3.6 has a NULL pointer dereference bug in ModuleState::setup in modules/ModuleState.cpp, which allows an attacker to cause a denial of service via a crafted caf file, as demonstrated by sfconvert.
- References