CVE Daily

CVE-2019-13147

In Audio File Library (aka audiofile) 0.3.6, there exists one NULL pointer deref...

Medium CVSS 6.5

Overview

In Audio File Library (aka audiofile) 0.3.6, there exists one NULL pointer dereference bug in ulaw2linear_buf in G711.cpp in libmodules.a that allows an attacker to cause a denial of service via a crafted file.

CWE: CWE-476 Published: 2019-07-02T00:15:10.397
Risk analysis

This vulnerability is rated 🟡 MEDIUM.

  • CVSS: 6.5 (MEDIUM)
  • Detected tags: none (tag impact: LOW)

Recommended actions:

  • Prioritize remediation based on business criticality and exposure.
  • Limit exposure and increase monitoring until fixed.

Recommended tools

Tags