CVE-2021-4156
- Source
- https://cve.org/CVERecord?id=CVE-2021-4156
- Import Source
- https://storage.googleapis.com/osv-test-cve-osv-conversion/osv-output/CVE-2021-4156.json
- JSON Data
- https://api.test.osv.dev/v1/vulns/CVE-2021-4156
- Downstream
- Related
- Published
- 2022-03-23T20:15:10.097Z
- Modified
- 2026-02-11T14:33:55.422167Z
- Severity
-
- 7.1 (High) CVSS_V3 - CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:L/I:N/A:H CVSS Calculator
- Summary
- [none]
- Details
-
An out-of-bounds read flaw was found in libsndfile's FLAC codec functionality. An attacker who is able to submit a specially crafted file (via tricking a user to open or otherwise) to an application linked with libsndfile and using the FLAC codec, could trigger an out-of-bounds read that would most likely cause a crash but could potentially leak memory information that could be used in further exploitation of other flaws.
- References
-
- https://lists.debian.org/debian-lts-announce/2025/12/msg00013.html
- https://bugzilla.redhat.com/show_bug.cgi?id=2027690
- https://github.com/libsndfile/libsndfile/issues/731
- https://github.com/libsndfile/libsndfile/pull/732/commits/4c30646abf7834e406f7e2429c70bc254e18beab
- https://lists.debian.org/debian-lts-announce/2022/06/msg00020.html
- https://lists.debian.org/debian-lts-announce/2022/09/msg00036.html
- https://security.gentoo.org/glsa/202309-11
- https://bugzilla.redhat.com/show_bug.cgi?id=2027690
- https://github.com/libsndfile/libsndfile/issues/731
- https://github.com/libsndfile/libsndfile/pull/732/commits/4c30646abf7834e406f7e2429c70bc254e18beab
- https://lists.debian.org/debian-lts-announce/2022/06/msg00020.html
- https://lists.debian.org/debian-lts-announce/2022/09/msg00036.html
- https://bugzilla.redhat.com/show_bug.cgi?id=2027690
- https://github.com/libsndfile/libsndfile/issues/731
Affected packages
Git / gitlab.com/muttmua/mutt
Affected ranges
- Type
- GIT
- Repo
- https://gitlab.com/muttmua/mutt
- Events
-
Introduced0 Unknown introduced commit / All previous commits are affectedLast affected
Affected versions
Other
mutt-0-92-10i
mutt-0-92-11i
mutt-0-92-9i
mutt-0-93-unstable
mutt-0-94-10i-rel
mutt-0-94-13-rel
mutt-0-94-14-rel
mutt-0-94-15-rel
mutt-0-94-16i-rel
mutt-0-94-17i-rel
mutt-0-94-18-rel
mutt-0-94-5i-rel
mutt-0-94-6i-rel
mutt-0-94-7i-rel
mutt-0-94-8i-rel
mutt-0-94-9i-p1
mutt-0-94-9i-rel
mutt-0-95-rel
mutt-0-96-1-rel
mutt-0-96-2-slightly-post-release
mutt-0-96-3-rel
mutt-0-96-4-rel
mutt-0-96-5-rel
mutt-0-96-6-rel
mutt-0-96-7-rel
mutt-0-96-8-rel
mutt-0-96-rel
mutt-1-1-1-1-rel
mutt-1-1-1-2-rel
mutt-1-1-1-rel
mutt-1-1-10-rel
mutt-1-1-2-rel
mutt-1-1-3-rel
mutt-1-1-4-rel
mutt-1-1-5-rel
mutt-1-1-6-rel
mutt-1-1-7-rel
mutt-1-1-8-rel
mutt-1-1-9-rel
mutt-1-1-rel