pkg:Debian/libmysofa

All known vulnerabilities

• CRITICAL9.8CVE-2021-3756libmysofa is vulnerable to Heap-based Buffer Overflow
  from 0
• CRITICAL9.8CVE-2019-16093Symonics libmysofa 0.7 has an invalid write in readOHDRHeaderMessageDataLayout in hdf/dataobject.c.
  from 0, < 0.8~dfsg0-1
• CRITICAL9.8CVE-2019-16092Symonics libmysofa 0.7 has a NULL pointer dereference in getHrtf in hrtf/reader.c.
  from 0, < 0.8~dfsg0-1
• CRITICAL9.8CVE-2019-10672treeRead in hdf/btree.c in libmysofa before 0.7 does not properly validate multiplications and additions.
  from 0, < 0.6~dfsg0-3
• HIGH8.8CVE-2020-36152Buffer overflow in readDataVar in hdf/dataobject.c in Symonics libmysofa 0.5 - 1.1 allows attackers to execute arbitrary code via a crafted…
  from 0, < 1.2~dfsg0-1
• HIGH8.8CVE-2020-6860libmysofa 0.9.1 has a stack-based buffer overflow in readDataVar in hdf/dataobject.c during the reading of a header message attribute.
  from 0, < 1.0~dfsg0-1
• HIGH8.8CVE-2019-20063hdf/dataobject.c in libmysofa before 0.8 has an uninitialized use of memory, as demonstrated by mysofa2json.
  from 0, < 0.8~dfsg0-1
• HIGH7.5CVE-2019-16095Symonics libmysofa 0.7 has an invalid read in getDimension in hrtf/reader.c.
  from 0, < 0.8~dfsg0-1
• HIGH7.5CVE-2019-16094Symonics libmysofa 0.7 has an invalid read in readOHDRHeaderMessageDataLayout in hdf/dataobject.c.
  from 0, < 0.8~dfsg0-1
• HIGH7.5CVE-2019-16091Symonics libmysofa 0.7 has an out-of-bounds read in directblockRead in hdf/fractalhead.c.
  from 0, < 0.8~dfsg0-1
• MEDIUM6.5CVE-2020-36151Incorrect handling of input data in mysofa_resampler_reset_mem function in the libmysofa library 0.5 - 1.1 will lead to heap buffer overflo…
  from 0, < 1.2~dfsg0-1
• MEDIUM6.5CVE-2020-36150Incorrect handling of input data in loudness function in the libmysofa library 0.5 - 1.1 will lead to heap buffer overflow and access to un…
  from 0, < 1.2~dfsg0-1
• MEDIUM6.5CVE-2020-36149Incorrect handling of input data in changeAttribute function in the libmysofa library 0.5 - 1.1 will lead to NULL pointer dereference and s…
  from 0, < 1.2~dfsg0-1
• MEDIUM6.5CVE-2020-36148Incorrect handling of input data in verifyAttribute function in the libmysofa library 0.5 - 1.1 will lead to NULL pointer dereference and s…
  from 0, < 1.2~dfsg0-1
• MEDIUM6.5CVE-2019-20016libmysofa before 2019-11-24 does not properly restrict recursive function calls, as demonstrated by reports of stack consumption in readOHD…
  from 0, < 0.9~dfsg0-1