CVE-2014-8962

High

Published: 26/11/2014(UTC)Translated: 16/06/2026(UTC)NVD NIST

Summary

A stack-based buffer overflow in stream_decoder.c in libFLAC before version 1.3.1 allows remote attackers to execute arbitrary code via a crafted .flac file.

Risk Assessment

Attackers can exploit this vulnerability to execute arbitrary code remotely, potentially leading to system compromise or data leakage.

Recommendation

It is recommended to update the libFLAC library to version 1.3.1 or later to mitigate this vulnerability.

Other vulnerabilities in libFLAC

CVE-2014-9028High
A heap-based buffer overflow in libFLAC before version 1.3.1 in stream_decoder.c allows remote attackers to execute arbitrary code via a crafted .flac file.

Original NVD description (English source)

Stack-based buffer overflow in stream_decoder.c in libFLAC before 1.3.1 allows remote attackers to execute arbitrary code via a crafted .flac file.