CVE-2014-9028
flac: Heap buffer write overflow in read_residual_partitioned_rice_
Loading…
Severity
ImportantRed Hat Product Security
CVSS 2.0
Review impact separately from score.
Published · November 25, 2014
Updated · November 5, 2026
Description
A buffer overflow flaw was found in the way flac decoded FLAC audio files. An attacker could create a specially crafted FLAC audio file that could cause an application using the flac library to crash or execute arbitrary code when the file was read.
CVSS score applicability
The CVSS score(s) listed for this vulnerability do not reflect the associated product's status, and are included for informational purposes to better understand the severity of this vulnerability.
Mitigation
No mitigation is specified in collected source.
CVSS / CWE
CVSS 2.0 · 6.8AV:N/AC:M/Au:N/C:P/I:P/A:P
CWE-122 · Heap-based Buffer Overflow