audiofile CVE Vulnerabilities & Metrics

Focus on audiofile vulnerabilities and metrics.

Last updated: 21 Aug 2025, 22:25 UTC

About audiofile Security Exposure

This page consolidates all known Common Vulnerabilities and Exposures (CVEs) associated with audiofile. We track both calendar-based metrics (using fixed periods) and rolling metrics (using gliding windows) to give you a comprehensive view of security trends and risk evolution. Use these insights to assess risk and plan your patching strategy.

For a broader perspective on cybersecurity threats, explore the comprehensive list of CVEs by vendor and product. Stay updated on critical vulnerabilities affecting major software and hardware providers.

Global CVE Overview

Total audiofile CVEs: 19
Earliest CVE date: 15 Mar 2017, 14:59 UTC
Latest CVE date: 22 Aug 2023, 19:15 UTC

Latest CVE reference: CVE-2020-18781

Rolling Stats

30-day Count (Rolling): 0
365-day Count (Rolling): 0

Calendar-based Variation

Calendar-based Variation compares a fixed calendar period (e.g., this month versus the same month last year), while Rolling Growth Rate uses a continuous window (e.g., last 30 days versus the previous 30 days) to capture trends independent of calendar boundaries.

Variations & Growth

Month Variation (Calendar): 0%
Year Variation (Calendar): 0%

Month Growth Rate (30-day Rolling): 0.0%
Year Growth Rate (365-day Rolling): 0.0%

Monthly CVE Trends (current vs previous Year)

Annual CVE Trends (Last 20 Years)

Critical audiofile CVEs (CVSS ≥ 9) Over 20 Years

CVSS Stats

Average CVSS: 4.6

Max CVSS: 6.8

Critical CVEs (≥9): 0

CVSS Range vs. Count

Range Count
0.0-3.9 1
4.0-6.9 18
7.0-8.9 0
9.0-10.0 0

CVSS Distribution Chart

Top 5 Highest CVSS audiofile CVEs

These are the five CVEs with the highest CVSS scores for audiofile, sorted by severity first and recency.

All CVEs for audiofile

CVE-2020-18781 audiofile vulnerability CVSS: 0 22 Aug 2023, 19:15 UTC

Heap buffer overflow vulnerability in FilePOSIX::read in File.cpp in audiofile 0.3.6 may cause denial-of-service via a crafted wav file, this bug can be triggered by the executable sfconvert.

CVE-2022-24599 audiofile vulnerability CVSS: 4.3 24 Feb 2022, 15:15 UTC

In autofile Audio File Library 0.3.6, there exists one memory leak vulnerability in printfileinfo, in printinfo.c, which allows an attacker to leak sensitive information via a crafted file. The printfileinfo function calls the copyrightstring function to get data, however, it dosn't use zero bytes to truncate the data.

CVE-2015-7747 audiofile vulnerability CVSS: 6.8 19 Feb 2020, 21:15 UTC

Buffer overflow in the afReadFrames function in audiofile (aka libaudiofile and Audio File Library) allows user-assisted remote attackers to cause a denial of service (program crash) or possibly execute arbitrary code via a crafted audio file, as demonstrated by sixteen-stereo-to-eight-mono.c.

CVE-2019-13147 audiofile vulnerability CVSS: 4.3 02 Jul 2019, 00:15 UTC

In Audio File Library (aka audiofile) 0.3.6, there exists one NULL pointer dereference bug in ulaw2linear_buf in G711.cpp in libmodules.a that allows an attacker to cause a denial of service via a crafted file.

CVE-2018-17095 audiofile vulnerability CVSS: 6.8 16 Sep 2018, 21:29 UTC

An issue has been discovered in mpruett Audio File Library (aka audiofile) 0.3.6, 0.3.5, 0.3.4, 0.3.3, 0.3.2, 0.3.1, 0.3.0. A heap-based buffer overflow in Expand3To4Module::run has occurred when running sfconvert.

CVE-2018-13440 audiofile vulnerability CVSS: 4.3 08 Jul 2018, 16:29 UTC

The audiofile Audio File Library 0.3.6 has a NULL pointer dereference bug in ModuleState::setup in modules/ModuleState.cpp, which allows an attacker to cause a denial of service via a crafted caf file, as demonstrated by sfconvert.

CVE-2017-6839 audiofile vulnerability CVSS: 4.3 20 Mar 2017, 16:59 UTC

Integer overflow in modules/MSADPCM.cpp in Audio File Library (aka audiofile) 0.3.6 allows remote attackers to cause a denial of service (crash) via a crafted file.

CVE-2017-6838 audiofile vulnerability CVSS: 4.3 20 Mar 2017, 16:59 UTC

Integer overflow in sfcommands/sfconvert.c in Audio File Library (aka audiofile) 0.3.6 allows remote attackers to cause a denial of service (crash) via a crafted file.

CVE-2017-6837 audiofile vulnerability CVSS: 4.3 20 Mar 2017, 16:59 UTC

WAVE.cpp in Audio File Library (aka audiofile) 0.3.6 allows remote attackers to cause a denial of service (crash) via vectors related to a large number of coefficients.

CVE-2017-6836 audiofile vulnerability CVSS: 4.3 20 Mar 2017, 16:59 UTC

Heap-based buffer overflow in the Expand3To4Module::run function in libaudiofile/modules/SimpleModule.h in Audio File Library (aka audiofile) 0.3.6, 0.3.5, 0.3.4, 0.3.3, 0.3.2, 0.3.1, 0.3.0 allows remote attackers to cause a denial of service (crash) via a crafted file.

CVE-2017-6835 audiofile vulnerability CVSS: 4.3 20 Mar 2017, 16:59 UTC

The reset1 function in libaudiofile/modules/BlockCodec.cpp in Audio File Library (aka audiofile) 0.3.6 allows remote attackers to cause a denial of service (divide-by-zero error and crash) via a crafted file.

CVE-2017-6834 audiofile vulnerability CVSS: 4.3 20 Mar 2017, 16:59 UTC

Heap-based buffer overflow in the ulaw2linear_buf function in G711.cpp in Audio File Library (aka audiofile) 0.3.6, 0.3.5, 0.3.4, 0.3.3, 0.3.2, 0.3.1, 0.3.0, 0.2.7 allows remote attackers to cause a denial of service (crash) via a crafted file.

CVE-2017-6833 audiofile vulnerability CVSS: 4.3 20 Mar 2017, 16:59 UTC

The runPull function in libaudiofile/modules/BlockCodec.cpp in Audio File Library (aka audiofile) 0.3.6 allows remote attackers to cause a denial of service (divide-by-zero error and crash) via a crafted file.

CVE-2017-6832 audiofile vulnerability CVSS: 4.3 20 Mar 2017, 16:59 UTC

Heap-based buffer overflow in the decodeBlock in MSADPCM.cpp in Audio File Library (aka audiofile) 0.3.6, 0.3.5, 0.3.4, 0.3.3, 0.3.2, 0.3.1, 0.3.0, 0.2.7 allows remote attackers to cause a denial of service (crash) via a crafted file.

CVE-2017-6831 audiofile vulnerability CVSS: 4.3 20 Mar 2017, 16:59 UTC

Heap-based buffer overflow in the decodeBlockWAVE function in IMA.cpp in Audio File Library (aka audiofile) 0.3.6, 0.3.5, 0.3.4, 0.3.3, 0.3.2, 0.3.1, 0.3.0 and 0.2.7 allows remote attackers to cause a denial of service (crash) via a crafted file.

CVE-2017-6830 audiofile vulnerability CVSS: 4.3 20 Mar 2017, 16:59 UTC

Heap-based buffer overflow in the alaw2linear_buf function in G711.cpp in Audio File Library (aka audiofile) 0.3.6 allows remote attackers to cause a denial of service (crash) via a crafted file.

CVE-2017-6829 audiofile vulnerability CVSS: 4.3 20 Mar 2017, 16:59 UTC

The decodeSample function in IMA.cpp in Audio File Library (aka audiofile) 0.3.6 allows remote attackers to cause a denial of service (crash) via a crafted file.

CVE-2017-6828 audiofile vulnerability CVSS: 6.8 15 Mar 2017, 14:59 UTC

Heap-based buffer overflow in the readValue function in FileHandle.cpp in audiofile (aka libaudiofile and Audio File Library) 0.3.6 allows remote attackers to have unspecified impact via a crafted WAV file.

CVE-2017-6827 audiofile vulnerability CVSS: 6.8 15 Mar 2017, 14:59 UTC

Heap-based buffer overflow in the MSADPCM::initializeCoefficients function in MSADPCM.cpp in audiofile (aka libaudiofile and Audio File Library) 0.3.6 allows remote attackers to have unspecified impact via a crafted audio file.