CVE-2014-9028

High

Published: 26/11/2014(UTC)Translated: 16/06/2026(UTC)NVD NIST

Summary

A heap-based buffer overflow in libFLAC before version 1.3.1 in stream_decoder.c allows remote attackers to execute arbitrary code via a crafted .flac file.

Risk Assessment

An attacker can exploit this vulnerability to execute arbitrary code remotely, posing a significant security risk to systems processing .flac files.

Recommendation

It is recommended to update the libFLAC library to version 1.3.1 or later to mitigate the risk associated with this vulnerability.

Other vulnerabilities in libFLAC

CVE-2014-8962High
A stack-based buffer overflow in stream_decoder.c in libFLAC before version 1.3.1 allows remote attackers to execute arbitrary code via a crafted .flac file.

Original NVD description (English source)

Heap-based buffer overflow in stream_decoder.c in libFLAC before 1.3.1 allows remote attackers to execute arbitrary code via a crafted .flac file.