Description (CNA)
A vulnerability was detected in jarikomppa soloud up to 20200207. This affects the function SoLoud::Wav::loadwav of the file src/audiosource/wav/soloud_wav.cpp of the component WAV File Parser. Performing a manipulation results in memory corruption. The attack must be initiated from a local position. The exploit is now public and may be used. The project was informed of the problem early through an issue report but has not responded yet.
Affected (CNA)
| Vendor / product | Versions |
|---|---|
| jarikomppa / soloud | affected 20200207 |
CWE
CWE-119
References
- https://vuldb.com/?id.348280
- https://vuldb.com/?ctiid.348280
- https://vuldb.com/?submit.761339
- https://github.com/jarikomppa/soloud/issues/401
- https://github.com/oneafter/0209/blob/main/so2/repro
- https://github.com/jarikomppa/soloud/
ADP enrichment
No English description supplied.
No references supplied.