Symonics Libmysofa
By the Year
In 2024 there have been 0 vulnerabilities in Symonics Libmysofa . Libmysofa did not have any published security vulnerabilities last year.
Year | Vulnerabilities | Average Score |
---|---|---|
2024 | 0 | 0.00 |
2023 | 0 | 0.00 |
2022 | 0 | 0.00 |
2021 | 6 | 7.43 |
2020 | 1 | 8.80 |
2019 | 8 | 8.40 |
2018 | 0 | 0.00 |
It may take a day or so for new Libmysofa vulnerabilities to show up in the stats or in the list of recent security vulnerabilties. Additionally vulnerabilities may be tagged under a different product or component name.
Recent Symonics Libmysofa Security Vulnerabilities
libmysofa is vulnerable to Heap-based Buffer Overflow
CVE-2021-3756
9.8 - Critical
- October 29, 2021
libmysofa is vulnerable to Heap-based Buffer Overflow
Memory Corruption
Incorrect handling of input data in verifyAttribute function in the libmysofa library 0.5 - 1.1 will lead to NULL pointer dereference and segmentation fault error in case of restrictive memory protection or near NULL pointer overwrite in case of no memory restrictions (e.g
CVE-2020-36148
6.5 - Medium
- February 08, 2021
Incorrect handling of input data in verifyAttribute function in the libmysofa library 0.5 - 1.1 will lead to NULL pointer dereference and segmentation fault error in case of restrictive memory protection or near NULL pointer overwrite in case of no memory restrictions (e.g. in embedded environments).
NULL Pointer Dereference
Incorrect handling of input data in changeAttribute function in the libmysofa library 0.5 - 1.1 will lead to NULL pointer dereference and segmentation fault error in case of restrictive memory protection or near NULL pointer overwrite in case of no memory restrictions (e.g
CVE-2020-36149
6.5 - Medium
- February 08, 2021
Incorrect handling of input data in changeAttribute function in the libmysofa library 0.5 - 1.1 will lead to NULL pointer dereference and segmentation fault error in case of restrictive memory protection or near NULL pointer overwrite in case of no memory restrictions (e.g. in embedded environments).
NULL Pointer Dereference
Incorrect handling of input data in loudness function in the libmysofa library 0.5 - 1.1 will lead to heap buffer overflow and access to unallocated memory block.
CVE-2020-36150
6.5 - Medium
- February 08, 2021
Incorrect handling of input data in loudness function in the libmysofa library 0.5 - 1.1 will lead to heap buffer overflow and access to unallocated memory block.
Memory Corruption
Incorrect handling of input data in mysofa_resampler_reset_mem function in the libmysofa library 0.5 - 1.1 will lead to heap buffer overflow and overwriting large memory block.
CVE-2020-36151
6.5 - Medium
- February 08, 2021
Incorrect handling of input data in mysofa_resampler_reset_mem function in the libmysofa library 0.5 - 1.1 will lead to heap buffer overflow and overwriting large memory block.
Memory Corruption
Buffer overflow in readDataVar in hdf/dataobject.c in Symonics libmysofa 0.5 - 1.1
CVE-2020-36152
8.8 - High
- February 08, 2021
Buffer overflow in readDataVar in hdf/dataobject.c in Symonics libmysofa 0.5 - 1.1 allows attackers to execute arbitrary code via a crafted SOFA.
Classic Buffer Overflow
libmysofa 0.9.1 has a stack-based buffer overflow in readDataVar in hdf/dataobject.c during the reading of a header message attribute.
CVE-2020-6860
8.8 - High
- January 13, 2020
libmysofa 0.9.1 has a stack-based buffer overflow in readDataVar in hdf/dataobject.c during the reading of a header message attribute.
Memory Corruption
hdf/dataobject.c in libmysofa before 0.8 has an uninitialized use of memory
CVE-2019-20063
8.8 - High
- December 29, 2019
hdf/dataobject.c in libmysofa before 0.8 has an uninitialized use of memory, as demonstrated by mysofa2json.
Improper Initialization
libmysofa before 2019-11-24 does not properly restrict recursive function calls
CVE-2019-20016
6.5 - Medium
- December 27, 2019
libmysofa before 2019-11-24 does not properly restrict recursive function calls, as demonstrated by reports of stack consumption in readOHDRHeaderMessageDatatype in dataobject.c and directblockRead in fractalhead.c. NOTE: a download of v0.9 after 2019-12-06 should fully remediate this issue.
Memory Corruption
Symonics libmysofa 0.7 has an out-of-bounds read in directblockRead in hdf/fractalhead.c.
CVE-2019-16091
7.5 - High
- September 08, 2019
Symonics libmysofa 0.7 has an out-of-bounds read in directblockRead in hdf/fractalhead.c.
Out-of-bounds Read
Symonics libmysofa 0.7 has a NULL pointer dereference in getHrtf in hrtf/reader.c.
CVE-2019-16092
9.8 - Critical
- September 08, 2019
Symonics libmysofa 0.7 has a NULL pointer dereference in getHrtf in hrtf/reader.c.
NULL Pointer Dereference
Symonics libmysofa 0.7 has an invalid write in readOHDRHeaderMessageDataLayout in hdf/dataobject.c.
CVE-2019-16093
9.8 - Critical
- September 08, 2019
Symonics libmysofa 0.7 has an invalid write in readOHDRHeaderMessageDataLayout in hdf/dataobject.c.
Memory Corruption
Symonics libmysofa 0.7 has an invalid read in readOHDRHeaderMessageDataLayout in hdf/dataobject.c.
CVE-2019-16094
7.5 - High
- September 08, 2019
Symonics libmysofa 0.7 has an invalid read in readOHDRHeaderMessageDataLayout in hdf/dataobject.c.
Out-of-bounds Read
Symonics libmysofa 0.7 has an invalid read in getDimension in hrtf/reader.c.
CVE-2019-16095
7.5 - High
- September 08, 2019
Symonics libmysofa 0.7 has an invalid read in getDimension in hrtf/reader.c.
Out-of-bounds Read
treeRead in hdf/btree.c in libmysofa before 0.7 does not properly validate multiplications and additions.
CVE-2019-10672
9.8 - Critical
- March 31, 2019
treeRead in hdf/btree.c in libmysofa before 0.7 does not properly validate multiplications and additions.
Improper Input Validation
Stay on top of Security Vulnerabilities
Want an email whenever new vulnerabilities are published for Symonics Libmysofa or by Symonics? Click the Watch button to subscribe.