CVE-2025-50950: Null Pointer Dereference
Published Oct 23, 2025
·Updated
Audiofile v0.3.7 was discovered to contain a NULL pointer dereference via the ModuleState::setup function.
Affected Software
2 affected components
Audiofile audiofile
Audiofile audiofile=0.3.7
Event History
Oct 23, 2025
CVE Published
via MITRE·12:00 AM
Data Sourced
via MITRE·12:00 AM
Description
Data Sourced
via NVD·04:16 PM
DescriptionSeverityWeaknessAffected Software
Frequently Asked Questions
1
What is the severity of CVE-2025-50950?
CVE-2025-50950 has a medium severity rating due to the potential for a NULL pointer dereference leading to application crashes.
2
How do I fix CVE-2025-50950?
To fix CVE-2025-50950, update the Audiofile library to the latest version where the NULL pointer dereference issue has been addressed.
3
What systems are impacted by CVE-2025-50950?
CVE-2025-50950 affects Audiofile version 0.3.7 and potentially earlier versions.
4
Can CVE-2025-50950 be exploited remotely?
CVE-2025-50950 is typically not exploitable remotely, as it generally requires local conditions to trigger the NULL pointer dereference.
5
What does the ModuleState::setup function do in relation to CVE-2025-50950?
The ModuleState::setup function in Audiofile v0.3.7 is responsible for initializing module state, where the NULL pointer dereference vulnerability occurs.