Symonics Libmysofa
15 CVEs affecting Symonics Libmysofa. Latest disclosed: 2021-10-29. Critical: 4, High: 6.
| CVE | Severity | Score | Published | Summary |
|---|---|---|---|---|
CVE-2021-3756 | Critical | 9.8 | 2021-10-29 | libmysofa is vulnerable to Heap-based Buffer Overflow |
CVE-2019-16093 | Critical | 9.8 | 2019-09-08 | Symonics libmysofa 0.7 has an invalid write in readOHDRHeaderMessageDataLayout in hdf/dataobject.c. |
CVE-2019-16092 | Critical | 9.8 | 2019-09-08 | Symonics libmysofa 0.7 has a NULL pointer dereference in getHrtf in hrtf/reader.c. |
CVE-2019-10672 | Critical | 9.8 | 2019-03-31 | treeRead in hdf/btree.c in libmysofa before 0.7 does not properly validate multiplications and additions. |
CVE-2020-36152 | High | 8.8 | 2021-02-08 | Buffer overflow in readDataVar in hdf/dataobject.c in Symonics libmysofa 0.5 - 1.1 allows attackers to execute arbitrary code via a crafted SOFA. |
CVE-2020-6860 | High | 8.8 | 2020-01-13 | libmysofa 0.9.1 has a stack-based buffer overflow in readDataVar in hdf/dataobject.c during the reading of a header message attribute. |
CVE-2019-20063 | High | 8.8 | 2019-12-29 | hdf/dataobject.c in libmysofa before 0.8 has an uninitialized use of memory, as demonstrated by mysofa2json. |
CVE-2019-16095 | High | 7.5 | 2019-09-08 | Symonics libmysofa 0.7 has an invalid read in getDimension in hrtf/reader.c. |
CVE-2019-16094 | High | 7.5 | 2019-09-08 | Symonics libmysofa 0.7 has an invalid read in readOHDRHeaderMessageDataLayout in hdf/dataobject.c. |
CVE-2019-16091 | High | 7.5 | 2019-09-08 | Symonics libmysofa 0.7 has an out-of-bounds read in directblockRead in hdf/fractalhead.c. |
CVE-2020-36151 | Medium | 6.5 | 2021-02-08 | Incorrect handling of input data in mysofa_resampler_reset_mem function in the libmysofa library 0.5 - 1.1 will lead to heap buffer overflow and overwriting la… |
CVE-2020-36150 | Medium | 6.5 | 2021-02-08 | Incorrect handling of input data in loudness function in the libmysofa library 0.5 - 1.1 will lead to heap buffer overflow and access to unallocated memory blo… |
CVE-2020-36149 | Medium | 6.5 | 2021-02-08 | Incorrect handling of input data in changeAttribute function in the libmysofa library 0.5 - 1.1 will lead to NULL pointer dereference and segmentation fault er… |
CVE-2020-36148 | Medium | 6.5 | 2021-02-08 | Incorrect handling of input data in verifyAttribute function in the libmysofa library 0.5 - 1.1 will lead to NULL pointer dereference and segmentation fault er… |
CVE-2019-20016 | Medium | 6.5 | 2019-12-27 | libmysofa before 2019-11-24 does not properly restrict recursive function calls, as demonstrated by reports of stack consumption in readOHDRHeaderMessageDataty… |