Remote DoS and Information Disclosure Vulnerability in libsndfile 1.0.28

CVE-2017-14246 · MEDIUM Severity

AV:N/AC:M/AU:N/C:P/I:N/A:P

An out of bounds read in the function d2ulaw_array() in ulaw.c of libsndfile 1.0.28 may lead to a remote DoS attack or information disclosure, related to mishandling of the NAN and INFINITY floating-point values.

Learn more about our Web Application Penetration Testing UK.