Aggregates CVE and security vulnerability intelligence across all mega-nerd-related products, including CVSS, EPSS, publication dates, and vulnerability intelligence data.
Disclosed issues often relate to vendor risk buffer overflow, vendor risk denial of service, and vendor risk integer handling; exposure may include vendor impact application crash in vendor surface production workloads contexts.
| CVE | Summary | Source | Max CVSS | EPSS % | Published | Updated |
|---|---|---|---|---|---|---|
| CVE-2015-7805 | Heap-based buffer overflow in libsndfile 1.0.25 allows remote attackers to have unspecified impact via the headindex value in the header in an AIFF file. | [email protected] | 9.3 | 58.55% | 2015-11-17 | 2026-05-06 |
| CVE-2011-2696 | Integer overflow in libsndfile before 1.0.25 allows remote attackers to cause a denial of service (application crash) or possibly execute arbitrary code via a crafted PARIS Audio Format (PAF) file that triggers a heap-based buffer overflow. | [email protected] | 6.8 | 8.92% | 2011-07-27 | 2026-04-29 |
| CVE-2009-4835 | The (1) htk_read_header, (2) alaw_init, (3) ulaw_init, (4) pcm_init, (5) float32_init, and (6) sds_read_header functions in libsndfile 1.0.20 allow context-dependent attackers to cause a denial of service (divide-by-zero error and application crash) via a crafted audio file. | [email protected] | 4.3 | 0.37% | 2010-05-06 | 2026-04-29 |
| CVE-2009-1791 | Heap-based buffer overflow in aiff_read_header in libsndfile 1.0.15 through 1.0.19, as used in Winamp 5.552 and possibly other media programs, allows remote attackers to cause a denial of service (application crash) and possibly execute arbitrary code via an AIFF file with an invalid header value. | [email protected] | 9.3 | 8.48% | 2009-05-26 | 2026-04-23 |
| CVE-2009-1788 | Heap-based buffer overflow in voc_read_header in libsndfile 1.0.15 through 1.0.19, as used in Winamp 5.552 and possibly other media programs, allows remote attackers to cause a denial of service (application crash) and possibly execute arbitrary code via a VOC file with an invalid header value. | [email protected] | 9.3 | 8.57% | 2009-05-26 | 2026-04-23 |
| CVE-2009-0186 | Integer overflow in libsndfile 1.0.18, as used in Winamp and other products, allows context-dependent attackers to execute arbitrary code via crafted description chunks in a CAF audio file, leading to a heap-based buffer overflow. | [email protected] | 9.3 | 3.23% | 2009-03-05 | 2026-04-23 |
| CVE-2008-5008 | Buffer overflow in src/src_sinc.c in Secret Rabbit Code (aka SRC or libsamplerate) before 0.1.4, when "extreme low conversion ratios" are used, allows user-assisted attackers to have an unknown impact via a crafted audio file. | [email protected] | 9.3 | 1.04% | 2008-11-10 | 2026-04-23 |
| CVE-2007-4974 | Heap-based buffer overflow in the flac_buffer_copy function in libsndfile 1.0.17 and earlier might allow remote attackers to execute arbitrary code via a FLAC file with crafted PCM data containing a block with a size that exceeds the previous block size. | [email protected] | 7.5 | 7.06% | 2007-09-19 | 2026-04-23 |