CVE-2020-18781: Buffer Overflow
Published Aug 22, 2023
·Updated
Heap buffer overflow vulnerability in FilePOSIX::read in File.cpp in audiofile 0.3.6 may cause denial-of-service via a crafted wav file, this bug can be triggered by the executable sfconvert.
Affected Software
1 affected component
Audiofile audiofile=0.3.6
Event History
Aug 22, 2023
CVE Published
via MITRE·12:00 AM
Data Sourced
via MITRE·12:00 AM
Description
Frequently Asked Questions
1
What is the severity of CVE-2020-18781?
CVE-2020-18781 has a high severity rating due to the potential for denial-of-service attacks caused by a heap buffer overflow.
2
How do I fix CVE-2020-18781?
To fix CVE-2020-18781, upgrade the audiofile library to a version that addresses this vulnerability.
3
What versions of audiofile are affected by CVE-2020-18781?
CVE-2020-18781 specifically affects audiofile version 0.3.6.
4
What is the impact of exploiting CVE-2020-18781?
Exploiting CVE-2020-18781 can lead to a denial-of-service condition when processing a malicious wav file.
5
Which component of audiofile is vulnerable in CVE-2020-18781?
The vulnerability in CVE-2020-18781 is found in the FilePOSIX::read function within File.cpp.