Track vulnerabilities like this one.
Sign up free to get alerted when software you use is affected.
6.5
CVE-2020-36151: libmysofa can write beyond intended memory on reset
CVE-2020-36151 · published 5 years ago
Summary
The libmysofa library versions 0.5 through 1.1 (in Debian) mishandle input in its reset function, causing it to write past the area of memory it reserved. This can corrupt other program data and could allow an attacker to gain control. Upgrade to a newer libmysofa release or apply Debian’s security update; if that’s not possible, avoid using the affected function and watch for abnormal program behavior.
What to do
- Update debian libmysofa to version 1.2~dfsg0-1.
Affected software
| Ecosystem | Vendor | Product | Affected versions |
|---|---|---|---|
| Debian:12 | debian | libmysofa |
< 1.2~dfsg0-1 Fix: upgrade to 1.2~dfsg0-1
|
| Debian:13 | debian | libmysofa |
< 1.2~dfsg0-1 Fix: upgrade to 1.2~dfsg0-1
|
| Debian:14 | debian | libmysofa |
< 1.2~dfsg0-1 Fix: upgrade to 1.2~dfsg0-1
|
| – | symonics | libmysofa |
>= 0.5, <= 1.1 cpe:2.3:a:symonics:libmysofa:*:*:*:*:*:*:*:* |
| – | fedoraproject | fedora |
32 cpe:2.3:o:fedoraproject:fedora:32:*:*:*:*:*:*:* |
Original advisory text
Incorrect handling of input data in mysofa_resampler_reset_mem function in the libmysofa library 0.5 - 1.1 will lead to heap buffer overflow and overwriting large memory block.
Incorrect handling of input data in mysofa_resampler_reset_mem function in the libmysofa library 0.5 - 1.1 will lead to heap buffer overflow and overwriting large memory block.
References
- https://security-tracker.debian.org/tracker/CVE-2020-36151 Vendor Advisory
- https://github.com/hoene/libmysofa/issues/134 Exploit Patch Third Party Advisory
- https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedorapro...
Severity
6.5
Medium
Type
CWE-787Out-of-bounds Write
Timeline
Published8 Feb 2021
Updated3 Nov 2026
First seen11 Sep 2026
Track software like this
Free during beta