GNU Libextractor before 1.7 has a stack-based buffer overflow in ecreadfilefunc (unzip.c).

GNU Libextractor through 1.7 has an out-of-bounds read vulnerability in EXTRACTORzipextractmethod() in zipextractor.c.

In GNU Libextractor 1.4, there is a NULL Pointer Dereference in flacmetadata in flacextractor.c.

GNU Libextractor before 1.7 contains an infinite loop vulnerability in EXTRACTORmpegextractmethod (mpegextractor.c).

GNU Libextractor through 1.8 has a NULL Pointer Dereference vulnerability in the function processmetadata() in plugins/ole2extractor.c.

GNU Libextractor through 1.8 has an out-of-bounds read vulnerability in the function historyextract() in plugins/ole2extractor.c, related to EXTRACTORcommonconverttoutf8 in common/convert.c.

GNU Libextractor through 1.9 has a heap-based buffer over-read in the function EXTRACTORdviextractmethod in plugins/dviextractor.c.

Out of bounds Read vulnerability in ssmisgetfrm in libsubextractor.so prior to SMR Mar-2024 Release 1 allows local attackers to read out of bounds memory.

In GNU Libextractor 1.4, there is a Divide-By-Zero in EXTRACTORwavextractmethod in wavextractor.c via a zero sample rate.

In GNU Libextractor 1.4, there is an out-of-bounds read in the EXTRACTORdviextractmethod function in plugins/dviextractor.c.