https://vulnerability.circl.lu/rss/recent/all/10 Most recent entries from all 2026-09-30T03:20:01.109870+00:00 Vulnerability-Lookup info@circl.lu python-feedgen Contains only the most 10 recent entries. https://vulnerability.circl.lu/vuln/cve-2017-6888 CVE-2017-6888 2026-09-30T03:20:01.245861+00:00

Affected: FLAC

An error in the "read_metadata_vorbiscomment_()" function (src/libFLAC/stream_decoder.c) in FLAC version 1.3.2 can be exploited to cause a memory leak via a specially crafted FLAC file.

 https://vulnerability.circl.lu/vuln/usn-5733-1 USN-5733-1 — flac vulnerabilities 2026-09-30T03:20:01.245999+00:00

Affected: Ubuntu:Pro:14.04:LTS: flac, Ubuntu:Pro:16.04:LTS: flac, Ubuntu:18.04:LTS: flac, Ubuntu:20.04:LTS: flac, Ubuntu:22.04:LTS: flac

It was discovered that FLAC was not properly performing memory management operations, which could result in a memory leak. An attacker could possibly use this issue to cause FLAC to consume resources, leading to a denial of service. This issue only affected Ubuntu 14.04 ESM, Ubuntu 16.04 ESM and Ubuntu 18.04 LTS. (CVE-2017-6888)

It was discovered that FLAC was not properly performing bounds checking operations when decoding data. If a user or automated system were tricked into processing a specially crafted file, an attacker could possibly use this issue to expose sensitive information or to cause FLAC to crash, leading to a denial of service. This issue only affected Ubuntu 14.04 ESM, Ubuntu 16.04 ESM, Ubuntu 18.04 LTS and Ubuntu 20.04 LTS. (CVE-2020-0499)

It was discovered that FLAC was not properly performing bounds checking operations when encoding data. If a user or automated system were tricked into processing a specially crafted file, an attacker could possibly use this issue to expose sensitive information or to cause FLAC to crash, leading to a denial of service. (CVE-2021-0561)