debian/libmysofa vulnerabilities

Latest debian/libmysofa CVEs

Newest publication first

1. CVE-2021-3756 Heap-based Buffer Overflow in hoene/libmysofa

   Published 2021-10-29

   Critical·CVSS 9.8 EPSS 1.1%

   libmysofa is vulnerable to Heap-based Buffer Overflow

2. CVE-2020-36152 Buffer overflow in readDataVar in hdf/dataobject.c in Symonics libmysofa 0.5 - 1.1 allows attackers to execute arbitrary code via a crafted SOFA.

   Published 2021-02-08

   High·CVSS 8.8 EPSS 2.4%

   Buffer overflow in readDataVar in hdf/dataobject.c in Symonics libmysofa 0.5 - 1.1 allows attackers to execute arbitrary code via a crafted SOFA.

3. CVE-2020-36151 Incorrect handling of input data in mysofa_resampler_reset_mem function in the libmysofa library 0.5 - 1.1 will lead to heap buffer overflow and overwriting large memory block.

   Published 2021-02-08

   Medium·CVSS 6.5 EPSS 1.2%

   Incorrect handling of input data in mysofa_resampler_reset_mem function in the libmysofa library 0.5 - 1.1 will lead to heap buffer overflow and overwriting large memory block.

4. CVE-2020-36150 Incorrect handling of input data in loudness function in the libmysofa library 0.5 - 1.1 will lead to heap buffer overflow and access to unallocated memory block.

   Published 2021-02-08

   Medium·CVSS 6.5 EPSS 1.2%

   Incorrect handling of input data in loudness function in the libmysofa library 0.5 - 1.1 will lead to heap buffer overflow and access to unallocated memory block.

5. CVE-2020-36149 Incorrect handling of input data in changeAttribute function in the libmysofa library 0.5 - 1.1 will lead to NULL pointer dereference and segmentation fault error in case of restrictive memory protect...

   Published 2021-02-08

   Medium·CVSS 6.5 EPSS 1.2%

   Incorrect handling of input data in changeAttribute function in the libmysofa library 0.5 - 1.1 will lead to NULL pointer dereference and segmentation fault error in case of restrictive memory protection or near NULL pointer overwrite in case of no memory restrictions (e.g. in em...

6. CVE-2020-36148 Incorrect handling of input data in verifyAttribute function in the libmysofa library 0.5 - 1.1 will lead to NULL pointer dereference and segmentation fault error in case of restrictive memory protect...

   Published 2021-02-08

   Medium·CVSS 6.5 EPSS 1.2%

   Incorrect handling of input data in verifyAttribute function in the libmysofa library 0.5 - 1.1 will lead to NULL pointer dereference and segmentation fault error in case of restrictive memory protection or near NULL pointer overwrite in case of no memory restrictions (e.g. in em...

7. CVE-2020-6860 libmysofa 0.9.1 has a stack-based buffer overflow in readDataVar in hdf/dataobject.c during the reading of a header message attribute.

   Published 2020-01-13

   High·CVSS 8.8 EPSS 1.7%

   libmysofa 0.9.1 has a stack-based buffer overflow in readDataVar in hdf/dataobject.c during the reading of a header message attribute.

8. CVE-2019-20063 hdf/dataobject.c in libmysofa before 0.8 has an uninitialized use of memory, as demonstrated by mysofa2json.

   Published 2019-12-29

   High·CVSS 8.8 EPSS 1.5%

   hdf/dataobject.c in libmysofa before 0.8 has an uninitialized use of memory, as demonstrated by mysofa2json.

9. CVE-2019-20016 libmysofa before 2019-11-24 does not properly restrict recursive function calls, as demonstrated by reports of stack consumption in readOHDRHeaderMessageDatatype in dataobject.c and directblockRead in...

   Published 2019-12-27

   Medium·CVSS 6.5 EPSS 2.0%

   libmysofa before 2019-11-24 does not properly restrict recursive function calls, as demonstrated by reports of stack consumption in readOHDRHeaderMessageDatatype in dataobject.c and directblockRead in fractalhead.c. NOTE: a download of v0.9 after 2019-12-06 should fully remediate...

10. CVE-2019-16091 Symonics libmysofa 0.7 has an out-of-bounds read in directblockRead in hdf/fractalhead.c.

    Published 2019-09-08

    High·CVSS 7.5 EPSS 1.3%

    Symonics libmysofa 0.7 has an out-of-bounds read in directblockRead in hdf/fractalhead.c.

11. CVE-2019-16092 Symonics libmysofa 0.7 has a NULL pointer dereference in getHrtf in hrtf/reader.c.

    Published 2019-09-08

    Critical·CVSS 9.8 EPSS 1.5%

    Symonics libmysofa 0.7 has a NULL pointer dereference in getHrtf in hrtf/reader.c.

12. CVE-2019-16093 Symonics libmysofa 0.7 has an invalid write in readOHDRHeaderMessageDataLayout in hdf/dataobject.c.

    Published 2019-09-08

    Critical·CVSS 9.8 EPSS 1.5%

    Symonics libmysofa 0.7 has an invalid write in readOHDRHeaderMessageDataLayout in hdf/dataobject.c.

13. CVE-2019-16094 Symonics libmysofa 0.7 has an invalid read in readOHDRHeaderMessageDataLayout in hdf/dataobject.c.

    Published 2019-09-08

    High·CVSS 7.5 EPSS 1.3%

    Symonics libmysofa 0.7 has an invalid read in readOHDRHeaderMessageDataLayout in hdf/dataobject.c.

14. CVE-2019-16095 Symonics libmysofa 0.7 has an invalid read in getDimension in hrtf/reader.c.

    Published 2019-09-08

    High·CVSS 7.5 EPSS 1.3%

    Symonics libmysofa 0.7 has an invalid read in getDimension in hrtf/reader.c.

15. CVE-2019-10672 treeRead in hdf/btree.c in libmysofa before 0.7 does not properly validate multiplications and additions.

    Published 2019-03-31

    Critical·CVSS 9.8 EPSS 2.4%

    treeRead in hdf/btree.c in libmysofa before 0.7 does not properly validate multiplications and additions.

Sources: CVE.org, NVD, CISA KEV, FIRST EPSS, OSV and public exploit-reference metadata. Product matching comes from the published CVE records. A proof-of-concept means public code exists; it is not evidence of exploitation.