openEuler-SA-2026-1786

Synopsis:

audiofile security updateSummary:

An update for audiofile is now available for openEuler-22.03-LTS-SP4Description:

The Audio File Library is a C-based library for reading and writing audio files in many common formats.

Security Fix(es):

In Audio File Library (aka audiofile) 0.3.6, there exists one NULL pointer dereference bug in ulaw2linear_buf in G711.cpp in libmodules.a that allows an attacker to cause a denial of service via a crafted file.(CVE-2019-13147)

Audiofile v0.3.7 was discovered to contain a NULL pointer dereference via the ModuleState::setup function.(CVE-2025-50950)Topic:

An update for audiofile is now available for openEuler-22.03-LTS-SP4.

openEuler Security has rated this update as having a security impact of high. A Common Vunlnerability Scoring System(CVSS)base score,which gives a detailed severity rating, is available for each vulnerability from the CVElink(s) in the References section.Severity:

HighAffected Component:

audiofile