symonics 関連製品全体の CVE とセキュリティ脆弱性情報を集約し、CVSS、EPSS、公開日、脆弱性情報データを掲載しています。
過去の問題は主に vendor risk memory corruption and バッファオーバーフロー などに関し、一部は vendor impact memory corruption を招き、vendor surface software deployment and vendor surface production workloads 関連の場面に影響します。
掲載データは公開脆弱性情報とセキュリティ公告に基づき、過去の暴露面と修補優先度の評価に利用できます。
| CVE | 概要 | ソース | CVSS 最大値 | EPSS（%） | 公開 | 更新 |
|---|---|---|---|---|---|---|
| CVE-2021-3756 | libmysofa is vulnerable to Heap-based Buffer Overflow | [email protected] | 9.8 | 0.31% | 2021-10-29 | 2024-11-21 |
| CVE-2020-36152 | Buffer overflow in readDataVar in hdf/dataobject.c in Symonics libmysofa 0.5 - 1.1 allows attackers to execute arbitrary code via a crafted SOFA. | [email protected] | 8.8 | 1.45% | 2021-02-08 | 2024-11-21 |
| CVE-2020-36151 | Incorrect handling of input data in mysofa_resampler_reset_mem function in the libmysofa library 0.5 - 1.1 will lead to heap buffer overflow and overwriting large memory block. | [email protected] | 6.5 | 0.33% | 2021-02-08 | 2024-11-21 |
| CVE-2020-36150 | Incorrect handling of input data in loudness function in the libmysofa library 0.5 - 1.1 will lead to heap buffer overflow and access to unallocated memory block. | [email protected] | 6.5 | 0.33% | 2021-02-08 | 2024-11-21 |
| CVE-2020-36149 | Incorrect handling of input data in changeAttribute function in the libmysofa library 0.5 - 1.1 will lead to NULL pointer dereference and segmentation fault error in case of restrictive memory protection or near NULL pointer overwrite in case of no memory restrictions (e.g. in embedded environments). | [email protected] | 6.5 | 0.29% | 2021-02-08 | 2024-11-21 |
| CVE-2020-36148 | Incorrect handling of input data in verifyAttribute function in the libmysofa library 0.5 - 1.1 will lead to NULL pointer dereference and segmentation fault error in case of restrictive memory protection or near NULL pointer overwrite in case of no memory restrictions (e.g. in embedded environments). | [email protected] | 6.5 | 0.29% | 2021-02-08 | 2024-11-21 |
| CVE-2020-6860 | libmysofa 0.9.1 has a stack-based buffer overflow in readDataVar in hdf/dataobject.c during the reading of a header message attribute. | [email protected] | 8.8 | 0.55% | 2020-01-13 | 2024-11-21 |
| CVE-2019-20063 | hdf/dataobject.c in libmysofa before 0.8 has an uninitialized use of memory, as demonstrated by mysofa2json. | [email protected] | 8.8 | 0.39% | 2019-12-29 | 2024-11-21 |
| CVE-2019-20016 | libmysofa before 2019-11-24 does not properly restrict recursive function calls, as demonstrated by reports of stack consumption in readOHDRHeaderMessageDatatype in dataobject.c and directblockRead in fractalhead.c. NOTE: a download of v0.9 after 2019-12-06 should fully remediate this issue. | [email protected] | 6.5 | 0.53% | 2019-12-27 | 2024-11-21 |
| CVE-2019-16095 | Symonics libmysofa 0.7 has an invalid read in getDimension in hrtf/reader.c. | [email protected] | 7.5 | 0.46% | 2019-09-08 | 2024-11-21 |
| CVE-2019-16094 | Symonics libmysofa 0.7 has an invalid read in readOHDRHeaderMessageDataLayout in hdf/dataobject.c. | [email protected] | 7.5 | 0.45% | 2019-09-08 | 2024-11-21 |
| CVE-2019-16093 | Symonics libmysofa 0.7 has an invalid write in readOHDRHeaderMessageDataLayout in hdf/dataobject.c. | [email protected] | 9.8 | 0.47% | 2019-09-08 | 2024-11-21 |
| CVE-2019-16092 | Symonics libmysofa 0.7 has a NULL pointer dereference in getHrtf in hrtf/reader.c. | [email protected] | 9.8 | 0.41% | 2019-09-08 | 2024-11-21 |
| CVE-2019-16091 | Symonics libmysofa 0.7 has an out-of-bounds read in directblockRead in hdf/fractalhead.c. | [email protected] | 7.5 | 0.46% | 2019-09-08 | 2024-11-21 |
| CVE-2019-10672 | treeRead in hdf/btree.c in libmysofa before 0.7 does not properly validate multiplications and additions. | [email protected] | 9.8 | 0.60% | 2019-03-31 | 2024-11-21 |