Symonics Libmysofa — known CVE vulnerabilities

Every CVE whose affected-product data names Symonics Libmysofa, ordered by CVSS severity, with EPSS exploit prediction and CISA KEV status.

CVEs (15)

• CVE-2019-10672 — CVSS 9.8 (critical): treeRead in hdf/btree.c in libmysofa before 0.7 does not properly validate multiplications and additions.
• CVE-2019-16092 — CVSS 9.8 (critical): Symonics libmysofa 0.7 has a NULL pointer dereference in getHrtf in hrtf/reader.c.
• CVE-2019-16093 — CVSS 9.8 (critical): Symonics libmysofa 0.7 has an invalid write in readOHDRHeaderMessageDataLayout in hdf/dataobject.c.
• CVE-2021-3756 — CVSS 9.8 (critical): libmysofa is vulnerable to Heap-based Buffer Overflow
• CVE-2019-20063 — CVSS 8.8 (high): hdf/dataobject.c in libmysofa before 0.8 has an uninitialized use of memory, as demonstrated by mysofa2json.
• CVE-2020-36152 — CVSS 8.8 (high): Buffer overflow in readDataVar in hdf/dataobject.c in Symonics libmysofa 0.5 - 1.1 allows attackers to execute arbitrary code via a crafted…
• CVE-2020-6860 — CVSS 8.8 (high): libmysofa 0.9.1 has a stack-based buffer overflow in readDataVar in hdf/dataobject.c during the reading of a header message attribute.
• CVE-2019-16094 — CVSS 7.5 (high): Symonics libmysofa 0.7 has an invalid read in readOHDRHeaderMessageDataLayout in hdf/dataobject.c.
• CVE-2019-16095 — CVSS 7.5 (high): Symonics libmysofa 0.7 has an invalid read in getDimension in hrtf/reader.c.
• CVE-2019-16091 — CVSS 7.5 (high): Symonics libmysofa 0.7 has an out-of-bounds read in directblockRead in hdf/fractalhead.c.
• CVE-2020-36150 — CVSS 6.5 (medium): Incorrect handling of input data in loudness function in the libmysofa library 0.5 - 1.1 will lead to heap buffer overflow and access to…
• CVE-2020-36151 — CVSS 6.5 (medium): Incorrect handling of input data in mysofa_resampler_reset_mem function in the libmysofa library 0.5 - 1.1 will lead to heap buffer…
• CVE-2019-20016 — CVSS 6.5 (medium): libmysofa before 2019-11-24 does not properly restrict recursive function calls, as demonstrated by reports of stack consumption in…
• CVE-2020-36148 — CVSS 6.5 (medium): Incorrect handling of input data in verifyAttribute function in the libmysofa library 0.5 - 1.1 will lead to NULL pointer dereference and…
• CVE-2020-36149 — CVSS 6.5 (medium): Incorrect handling of input data in changeAttribute function in the libmysofa library 0.5 - 1.1 will lead to NULL pointer dereference and…