CVE-2020-22219

Buffer Overflow vulnerability in function bitwritergrow in flac before 1.4.0 allows remote attackers to run arbitrary code via crafted input to the encoder.

References

Affected packages

Git / github.com/xiph/flac

Affected ranges

Type: GIT
Repo: https://github.com/xiph/flac
Events: Introduced

0 Unknown introduced commit / All previous commits are affected

Fixed

2ab4677750138640ba3f5099f6158ede3d011ad5

Affected versions

1.*

1.2.0

1.2.1

1.3.0

1.3.0pre1

1.3.0pre2

1.3.0pre4

1.3.1

1.3.1pre1

1.3.2

1.3.3

Database specific

{
    "vanir_signatures": [
        {
            "id": "CVE-2020-22219-2c98bb14",
            "digest": {
                "line_hashes": [
                    "152107604567424876875904388249336828664",
                    "30114704270282453759121552844078659626",
                    "187232428140064635696377648144097001062",
                    "138550319727264050298699925731656785463"
                ],
                "threshold": 0.9
            },
            "signature_type": "Line",
            "target": {
                "file": "src/libFLAC/format.c"
            },
            "deprecated": false,
            "signature_version": "v1",
            "source": "https://github.com/xiph/flac/commit/2ab4677750138640ba3f5099f6158ede3d011ad5"
        }
    ]
}