CVE-2017-14634
libsndfile: Divide-by-zero in the double64_init() function
Loading…
Severity
LowRed Hat Product Security
CVSS 3.0
Review impact separately from score.
Published · September 14, 2017
Updated · May 13, 2026
Description
In libsndfile 1.0.28, a divide-by-zero error exists in the function double64_init() in double64.c, which may lead to DoS when playing a crafted audio file.
CVSS score applicability
The CVSS score(s) listed for this vulnerability do not reflect the associated product's status, and are included for informational purposes to better understand the severity of this vulnerability.
Mitigation
No mitigation is specified in collected source.
CVSS / CWE
CVSS 3.0 · 3.3CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:L
CWE-369 · Divide By Zero