Flac Project Flac vulnerabilities

2 vulnerabilities

Known vulnerabilities in Flac Project Flac, newest first, with CVSS severity, EPSS, KEV listings, ransomware use and the affected versions.

7.8CVE-2020-22219debianflac+17
EPSS score
0.79%
Buffer Overflow vulnerability in function bitwriter_grow_ in flac before 1.4.0 allows remote attackers to run arbitrary code via crafted input to the encoder.5.5CVE-2017-6888alpineflac+14
EPSS score
1.34%
An error in the "read_metadata_vorbiscomment_()" function (src/libFLAC/stream_decoder.c) in FLAC version 1.3.2 can be exploited to cause a memory leak via a specially crafted FLAC file.