RSS   Vulnerabilities for 'Libmysofa'   RSS

2021-10-29
 
CVE-2021-3756

CWE-787
 

 
libmysofa is vulnerable to Heap-based Buffer Overflow

 
2021-02-08
 
CVE-2020-36152

CWE-120
 

 
Buffer overflow in readDataVar in hdf/dataobject.c in Symonics libmysofa 0.5 - 1.1 allows attackers to execute arbitrary code via a crafted SOFA.

 
 
CVE-2020-36151

CWE-787
 

 
Incorrect handling of input data in mysofa_resampler_reset_mem function in the libmysofa library 0.5 - 1.1 will lead to heap buffer overflow and overwriting large memory block.

 
 
CVE-2020-36150

CWE-787
 

 
Incorrect handling of input data in loudness function in the libmysofa library 0.5 - 1.1 will lead to heap buffer overflow and access to unallocated memory block.

 
 
CVE-2020-36149

CWE-476
 

 
Incorrect handling of input data in changeAttribute function in the libmysofa library 0.5 - 1.1 will lead to NULL pointer dereference and segmentation fault error in case of restrictive memory protection or near NULL pointer overwrite in case of no memory restrictions (e.g. in embedded environments).

 
 
CVE-2020-36148

CWE-476
 

 
Incorrect handling of input data in verifyAttribute function in the libmysofa library 0.5 - 1.1 will lead to NULL pointer dereference and segmentation fault error in case of restrictive memory protection or near NULL pointer overwrite in case of no memory restrictions (e.g. in embedded environments).

 
2020-01-13
 
CVE-2020-6860

CWE-787
 

 
libmysofa 0.9.1 has a stack-based buffer overflow in readDataVar in hdf/dataobject.c during the reading of a header message attribute.

 
2019-12-29
 
CVE-2019-20063

CWE-665
 

 
hdf/dataobject.c in libmysofa before 0.8 has an uninitialized use of memory, as demonstrated by mysofa2json.

 
2019-12-27
 
CVE-2019-20016

CWE-787
 

 
libmysofa before 2019-11-24 does not properly restrict recursive function calls, as demonstrated by reports of stack consumption in readOHDRHeaderMessageDatatype in dataobject.c and directblockRead in fractalhead.c. NOTE: a download of v0.9 after 2019-12-06 should fully remediate this issue.

 
2019-09-07
 
CVE-2019-16095

CWE-125
 

 
Symonics libmysofa 0.7 has an invalid read in getDimension in hrtf/reader.c.

 


Copyright 2024, cxsecurity.com

 

Back to Top