Логотип exploitDog
Консоль
Логотип exploitDog

exploitDog

github логотип

GHSA-7j68-5pq5-623j

Опубликовано: 13 мая 2022
Источник: github
Github: Не прошло ревью
CVSS3: 5

Описание

An issue was discovered in SoX 14.4.2. lsx_make_lpf in effect_i_dsp.c has an integer overflow on the result of multiplication fed into malloc. When the buffer is allocated, it is smaller than expected, leading to a heap-based buffer overflow.

An issue was discovered in SoX 14.4.2. lsx_make_lpf in effect_i_dsp.c has an integer overflow on the result of multiplication fed into malloc. When the buffer is allocated, it is smaller than expected, leading to a heap-based buffer overflow.

EPSS

Процентиль: 65%
0.00494
Низкий

5 Medium

CVSS3

Дефекты

CWE-190
CWE-787

Связанные уязвимости

CVSS3: 5
ubuntu
почти 7 лет назад

An issue was discovered in SoX 14.4.2. lsx_make_lpf in effect_i_dsp.c has an integer overflow on the result of multiplication fed into malloc. When the buffer is allocated, it is smaller than expected, leading to a heap-based buffer overflow.

CVSS3: 5.9
redhat
около 7 лет назад

An issue was discovered in SoX 14.4.2. lsx_make_lpf in effect_i_dsp.c has an integer overflow on the result of multiplication fed into malloc. When the buffer is allocated, it is smaller than expected, leading to a heap-based buffer overflow.

CVSS3: 5
nvd
почти 7 лет назад

An issue was discovered in SoX 14.4.2. lsx_make_lpf in effect_i_dsp.c has an integer overflow on the result of multiplication fed into malloc. When the buffer is allocated, it is smaller than expected, leading to a heap-based buffer overflow.

CVSS3: 5
debian
почти 7 лет назад

An issue was discovered in SoX 14.4.2. lsx_make_lpf in effect_i_dsp.c ...

CVSS3: 5
fstec
почти 7 лет назад

Уязвимость функции lsx_make_lpf (effect_i_dsp.c) аудиоредактора Sound eXchange, позволяющая нарушителю вызвать отказ в обслуживании

EPSS

Процентиль: 65%
0.00494
Низкий

5 Medium

CVSS3

Дефекты

CWE-190
CWE-787