Логотип exploitDog
Консоль
Логотип exploitDog

exploitDog

github логотип

GHSA-q96g-69rj-hjwx

Опубликовано: 13 мая 2022
Источник: github
Github: Не прошло ревью
CVSS3: 5.5

Описание

An issue was discovered in SoX 14.4.2. One of the arguments to bitrv2 in fft4g.c is not guarded, such that it can lead to write access outside of the statically declared array, aka a stack-based buffer overflow.

An issue was discovered in SoX 14.4.2. One of the arguments to bitrv2 in fft4g.c is not guarded, such that it can lead to write access outside of the statically declared array, aka a stack-based buffer overflow.

EPSS

Процентиль: 74%
0.00823
Низкий

5.5 Medium

CVSS3

Дефекты

CWE-787

Связанные уязвимости

CVSS3: 5.5
ubuntu
почти 7 лет назад

An issue was discovered in SoX 14.4.2. One of the arguments to bitrv2 in fft4g.c is not guarded, such that it can lead to write access outside of the statically declared array, aka a stack-based buffer overflow.

CVSS3: 6.7
redhat
около 7 лет назад

An issue was discovered in SoX 14.4.2. One of the arguments to bitrv2 in fft4g.c is not guarded, such that it can lead to write access outside of the statically declared array, aka a stack-based buffer overflow.

CVSS3: 5.5
nvd
почти 7 лет назад

An issue was discovered in SoX 14.4.2. One of the arguments to bitrv2 in fft4g.c is not guarded, such that it can lead to write access outside of the statically declared array, aka a stack-based buffer overflow.

CVSS3: 5.5
debian
почти 7 лет назад

An issue was discovered in SoX 14.4.2. One of the arguments to bitrv2 ...

CVSS3: 5.5
fstec
почти 7 лет назад

Уязвимость функции bitrv2 (fft4g.c) аудиоредактора Sound eXchange, позволяющая нарушителю вызвать отказ в обслуживании

EPSS

Процентиль: 74%
0.00823
Низкий

5.5 Medium

CVSS3

Дефекты

CWE-787