← Back

Flac Project

flac_project

2 CVEs • 1 product

Products (1)

Click to collapse
Toggle
Flac
flac

CVEs (2)

CVE
VENDORS
PRODUCTS
UPDATED
PUBLISHED
CVSS
1Flac Project
1Flac
Jun 17, 2026
Aug 22, 2023
N/A· v4
7.8 HIGH· v3
N/A· v2
Buffer Overflow vulnerability in function bitwriter_grow_ in flac before 1.4.0 allows remote attackers to run arbitrary code via crafted input to the encoder.
3Debian
FedoraprojectFlac Project
3Debian Linux
FedoraFlac
Nov 21, 2024
Apr 25, 2018
N/A· v4
5.5 MEDIUM· v3
4.3 MEDIUM· v2
An error in the "read_metadata_vorbiscomment_()" function (src/libFLAC/stream_decoder.c) in FLAC version 1.3.2 can be exploited to cause a memory leak via a specially crafted FLAC file.