Bug 711394 (CVE-2019-13147)

Summary:	media-libs/audiofile: Denial of service in ulaw2linear_buf via crafted file (CVE-2019-13147)
Product:	Gentoo Security	Reporter:	Sam James <sam>
Component:	Vulnerabilities	Assignee:	Gentoo Security <security>
Status:	IN_PROGRESS ---
Severity:	minor	CC:	gnome, sound
Priority:	Normal
Version:	unspecified
Hardware:	All
OS:	Linux
URL:	https://github.com/mpruett/audiofile/issues/54
See Also:	https://bugs.gentoo.org/show_bug.cgi?id=614046
Whiteboard:	B3 [upstream]
Package list:		Runtime testing required:	---

Description Sam James archtester

2020-03-02 23:57:42 UTC

Description:
"In Audio File Library (aka audiofile) 0.3.6, there exists one NULL pointer dereference bug in ulaw2linear_buf in G711.cpp in libmodules.a that allows an attacker to cause a denial of service via a crafted file."

Not yet fixed upstream.