CVE:CVE-2021-3246
CNNVD:CNNVD-202107-1543
libsndfile是一款用于读取和写入包含采样音频数据的声音文件的AC库。
libsndfile 1.0.30存在安全漏洞，该漏洞源于msadpcm解码块中的堆缓冲区溢出漏洞允许攻击者可利用该漏洞通过精心制作的WAV文件执行任意代码。
solution:Upgrade libsndfile_project libsndfile to a higher version than 1.0.30,and avoid the version 1.0.30; Upgrade fedoraproject fedora to a higher version than 33,34,and avoid the version 33,34; Upgrade debian debian_linux to a higher version than 9.0,10.0,and avoid the version 9.0,10.0