cve/2019/CVE-2019-3832.md

CVE-2019-3832

Description

It was discovered the fix for CVE-2018-19758 (libsndfile) was not complete and still allows a read beyond the limits of a buffer in wav_write_header() function in wav.c. A local attacker may use this flaw to make the application crash.

POC

Reference

• https://github.com/erikd/libsndfile/issues/456
• https://github.com/erikd/libsndfile/issues/456
• https://usn.ubuntu.com/4013-1/
• https://usn.ubuntu.com/4013-1/

Github

No PoCs found on GitHub currently.